Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQLi

2023-11-1600:00:00

wpscan.com

contact form 7

custom validation

sql injection

unauthenticated users

security vulnerability

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

JSON

Description The plugin does not properly sanitise and escape the post parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated uers