Database for Contact Form 7, WPforms, Elementor forms, 78da7e4ebf17bf04d89df5a7a7492deb53506a60

CVE, Research URL: 78da7e4ebf17bf04d89df5a7a7492deb53506a60
Home page URL: Security reports for Database for Contact Form 7, WPforms, Elementor forms
Application: Database for Contact Form 7, WPforms, Elementor forms
Published on: Aug 26, 2021
Research Description: Database for Contact Form 7, WPforms, Elementor forms [contact-form-entries] < 1.2.2 CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting Multiple CRM Perks plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'vx_debug' parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 1.2.2.
Status: vulnerable