Lucene search
+L

3 matches found

NVD
NVD
added 2023/12/15 3:15 p.m.21 views

CVE-2023-49188

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZealousWeb Track Geolocation Of Users Using Contact Form 7 allows Stored XSS.This issue affects Track Geolocation Of Users Using Contact Form 7: from n/a through 2.0...

5.9CVSS0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/15 3:5 p.m.83 views

CVE-2023-49188

CVE-2023-49188 affects the WordPress plugin Track Geolocation Of Users Using Contact Form 7 by ZealousWeb. The issue is an Improper Neutralization of Input During Web Page Generation (Stored XSS) in versions n/a through 2.0. The root cause is insufficient input sanitization/escaping in how user-p...

5.9CVSS5.6AI score0.00386EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/29 12:0 a.m.16 views

WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Track Geolocation Of Users Using Contact Form 7 Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49188 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1322772c72f4 Credits DoYeon Par...

5.9CVSS6.6AI score0.00386EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder