cleantalk
Vulnerabilities and Security Researches

Contact Form 7 IE DatePicker and Number Spinner Fix, 02c690f19974a88d0c8d24171a85c979710c0152

Published on
Apr 02, 2020
Research Description
Contact Form 7 IE DatePicker and Number Spinner Fix [contact-form-7-datepicker-fix] <= 2.6.0 (unfixed) WordPress Contact Form 7 Datepicker plugin <= 2.6.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by WordFence in WordPress Contact Form 7 Datepicker plugin (versions <= 2.6.0).
Affected versions
max 2.6.0.
Status
vulnerable