Add-on SweetAlert Contact Form 7 < 1.0.8 - Authenticated Stored Cross-Site Scripting (XSS)

Stored XSS "post-auth" in "tittle" field of the "Error Alert" and "Success Alert" sections of the plugin's settings page due to poor sanitization of entered characters. When you enter the payload and save the changes, it is permanently embedded in the html code of the settings page, so all users...

WordPress Add-on SweetAlert Contact Form 7 plugin <= 1.0.7 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability discovered by Juan M. in WordPress Add-on SweetAlert Contact Form 7 plugin versions = 1.0.7. Solution Update the WordPress Add-on SweetAlert Contact Form 7 plugin to the latest available version at least 1.0.8...