ItpathsolutionsContact Form To Any Api
2 matches found
CVE-2024-7617
CVE-2024-7617 concerns the WordPress plugin Contact Form to Any API. It is vulnerable to unauthenticated Stored XSS via Contact Form 7 form fields in all versions up to and including 1.2.2, due to insufficient input sanitization and output escaping. Attackers can inject arbitrary scripts that exe...
7.2CVSS6.1AI score0.00585EPSS
Save