cleantalk
Vulnerabilities and Security Researches

Redirection for Contact Form 7, CVE-2021-36913

CVE, Research URL

CVE-2021-36913

Published on
Oct 11, 2022
Research Description
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.
Affected versions
Min -, max 2.5.0.
Status
vulnerable