cleantalk
Vulnerabilities and Security Researches

Contact Form 7 Star Rating, CVE-2025-27303

CVE, Research URL

CVE-2025-27303

Published on
Feb 24, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating allows Stored XSS. This issue affects Contact Form 7 Star Rating: from n/a through 1.10.
Affected versions
max 1.10.
Status
vulnerable