Lucene search
+L
ItpathsolutionsContact Form To Any Api

2 matches found

CVE
CVE
•added 2023/11/03 11:04 p.m.•94 views

CVE-2023-32741

CVE-2023-32741 covers a SQL Injection vulnerability in the WordPress plugin “Contact Form to Any API” (versions

7.6CVSS7.2AI score0.00701EPSS
SaveWeb
CVE
CVE
•added 2024/09/25 2:05 a.m.•94 views

CVE-2024-7617

CVE-2024-7617 concerns the WordPress plugin Contact Form to Any API. It is vulnerable to unauthenticated Stored XSS via Contact Form 7 form fields in all versions up to and including 1.2.2, due to insufficient input sanitization and output escaping. Attackers can inject arbitrary scripts that exe...

7.2CVSS6.1AI score0.00615EPSS
Save