Lucene search
+L

2 matches found

NVD
NVD
added 2023/12/14 4:15 p.m.23 views

CVE-2023-49766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Ultimate Addons for Contact Form 7 allows Stored XSS.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.2.0...

7.1CVSS0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/12/04 12:00 a.m.21 views

WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Ultimate Addons for Contact Form 7 Type Plugin Vulnerable versions = 3.2.0 Fixed in 3.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49766 Patch priority High CVSS severity High 7.1 Developer Themefic PSID faa03e459da6 Credits RE-ALTER Required...

7.1CVSS6.6AI score0.00403EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder