Lucene search
+L
ItpathsolutionsContact Form To Any Api

2 matches found

CVE
CVE
added 2024/09/25 2:5 a.m.82 views

CVE-2024-7617

CVE-2024-7617 concerns the WordPress plugin Contact Form to Any API. It is vulnerable to unauthenticated Stored XSS via Contact Form 7 form fields in all versions up to and including 1.2.2, due to insufficient input sanitization and output escaping. Attackers can inject arbitrary scripts that exe...

7.2CVSS6.1AI score0.00585EPSS
Save
CVE
CVE
added 2023/11/03 11:4 p.m.71 views

CVE-2023-32741

CVE-2023-32741 covers a SQL Injection vulnerability in the WordPress plugin “Contact Form to Any API” (versions

7.6CVSS7.2AI score0.00701EPSS
Save