CVE-2025-24774: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows Reflected XSS.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through = 3.2.0...

CVE-2025-24773

CVE-2025-24773 affects the WordPress plugin WPCRM - CRM for Contact form CF7 & WooCommerce (vulnerable through 3.2.0). The issue is an SQL Injection arising from improper neutralization of input in the plugin’s SQL commands. The CVSS v3.1 base score is 9.3 (NETWORK, LOW ATTACK COMPLEXITY, NONE PR...