Lucene search
+L
FullworkspluginsQuick Contact Form*

1 matches found

CVE
CVE
added 2023/04/25 4:56 p.m.42 views

CVE-2022-47608

CVE-2022-47608 affects the WordPress plugin Quick Contact Form (Fullworks) up to version 8.0.3.1. The issue is a Stored Cross-Site Scripting (XSS) vulnerability exploitable by an authenticated attacker with admin+ privileges, as the root cause is insufficient input validation/escaping in the plug...

5.9CVSS4.9AI score0.00369EPSS
Save