Lucene search

K
wpvulndbZhongFu Su(JrXnm) of WuHan University WPVDB-ID:4FD2F1EF-39C6-4425-8B4D-1A332DABAC8D
HistoryJun 27, 2022 - 12:00 a.m.

Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting

2022-06-2700:00:00
ZhongFu Su(JrXnm) of WuHan University
wpscan.com
10
cross-site scripting
reflected
captcha
contact form 7

EPSS

0.001

Percentile

43.5%

The plugin does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

PoC

https://example.com/wp-admin/options-general.php?page=cf7sr_edit&">

EPSS

0.001

Percentile

43.5%

Related for WPVDB-ID:4FD2F1EF-39C6-4425-8B4D-1A332DABAC8D