CVE-2022-4226

CVE-2022-4226 affects the WordPress plugin Simple Basic Contact Form prior to version 20221201. The vulnerability arises because the plugin does not sanitize or escape certain settings, enabling Stored XSS where high-privilege users (e.g., admins) could execute scripts, even if unfiltered_html is...

CVE-2024-12716

The Simple Basic Contact Form WordPress plugin (versions prior to 20250114 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS at...