CVE-2022-0148

CVE-2022-0148 affects the WordPress plugin All-in-one Floating Contact Form (aka “All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs”) up to version 2.0.4. The vulnerability is a reflected cross-site scripting (XSS) on the my-sticky-elements-leads admin page. Exploitation coul...