Conditional Fields for Contact Form 7, CVE-2024-50412

CVE, Research URL: CVE-2024-50412
Home page URL: Security reports for Conditional Fields for Contact Form 7
Application: Conditional Fields for Contact Form 7
Published on: Oct 29, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jules Colle Conditional Fields for Contact Form 7 allows Stored XSS.This issue affects Conditional Fields for Contact Form 7: from n/a through 2.4.15.
Affected versions: max 2.5.
Status: vulnerable