CVE-2022-0250

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting...

CVE-2022-0250

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:29+00:00| seen| https://t.me/cibsecurity/45559 2024-12-02 11:15:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0250.yaml...

CVE-2022-0250

The CVE-2022-0250 entry describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Redirection for Contact Form 7 before version 2.5.0. The flaw arises because a generated link is not properly escaped before being output in an attribute, enabling injection of scripts in the ...