CVE-2021-24996

The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpayerror parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting...

PT-2022-9555

Name of the Vulnerable Software and Affected Versions IDPay for Contact Form 7 WordPress plugin versions 2.1.2 and earlier Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the idpay error parameter is not properly sanitised and escaped before being...