Custom Contact Forms, 39122f897433b6ec036186d3c378d3e28b55c3fb

CVE, Research URL: 39122f897433b6ec036186d3c378d3e28b55c3fb
Home page URL: Security reports for Custom Contact Forms
Application: Custom Contact Forms
Published on: May 15, 2023
Research Description: Custom Contact Forms [custom-contact-forms] < 5.0.0.2 (closed) WordPress Custom Contact Forms Plugin <= 5.0.0.1 is vulnerable to Cross Site Scripting (XSS) Update the plugin. An unknown person discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Custom Contact Forms Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 5.0.0.2.
Affected versions: max 5.0.0.2.
Status: vulnerable