Lucene search
Krzysztof ZającWPEX-ID:E2185887-3E53-4089-AA3F-981C944EE0BBHistoryJan 03, 2022 - 12:00 a.m.
Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)
2022-01-0300:00:00
Krzysztof Zając
83
0.001 Low
EPSS
Percentile
43.6%
The plugin does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=cf7skins&tab=%27%3E%3Cimg+src+onerror%3Dalert%281%29%3E
(requires the Contact Form 7 plugin to be installed)Related
prion
prion
Cross site scripting
2022-02-01 13:15:00
nuclei
nuclei
WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting
2022-02-19 11:24:34
nvd
nvd
CVE-2021-25063
2022-02-01 13:15:09
patchstack
patchstack
wpvulndb
wpvulndb
Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)
2022-01-03 00:00:00
cvelist
cvelist
cnvd
cnvd
WordPress Contact Form 7 Skins plugin cross-site scripting vulnerability
2022-02-10 00:00:00
cve
cve
CVE-2021-25063
2022-02-01 13:15:09