Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...

CVE-2023-22703

CVE-2023-22703 concerns the WordPress plugin WCP Contact Form by Webcodin, with a Reflected Cross-Site Scripting (XSS) vulnerability in versions ≤ 3.1.0. The root cause is insufficient sanitisation of the tab parameter, causing unauthenticated, network-exposed but user-initiated (UI: REQUIRED) XS...

PT-2023-18646

Name of the Vulnerable Software and Affected Versions Webcodin WCP Contact Form plugin versions prior to 3.1.0 Description The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially...

CVE-2023-22703: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Webcodin WCP Contact Form plugin = 3.1.0 versions...