CVE-2021-24744

creationtimestamp| type| source ---|---|--- 2021-10-25 18:23:25+00:00| seen| https://t.me/cibsecurity/31139...

CVE-2021-24744

The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages. which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24744

The CVE-2021-24744 entry concerns the WordPress Contact Forms by Cimatti plugin (pre-1.4.12). Affected component: Form Title handling in admin pages. Root cause: the Form Title is not sanitized/escaped before output, enabling stored Cross-Site Scripting (XSS) via admin interfaces. Impact: could a...