Lucene search
China National Vulnerability DatabaseCNVD-2022-62752HistoryMar 15, 2022 - 12:00 a.m.
WordPress Contact Form X plugin cross-site scripting vulnerability
2022-03-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.002 Low
EPSS
Percentile
52.6%
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Contact Form X plugin version 2.4 and earlier. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in the &tab parameter. An attacker could exploit this vulnerability to execute JavaScript code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress contact form x plugin | le | 2.4 |
Related
cve
cve
CVE-2022-25601
2022-03-11 18:15:40
wpvulndb
wpvulndb
Contact Form X < 2.4.1 - Reflected Cross-Site Scripting
2022-02-25 00:00:00
nvd
nvd
CVE-2022-25601
2022-03-11 18:15:40
wpexploit
wpexploit
Contact Form X < 2.4.1 - Reflected Cross-Site Scripting
2022-02-25 00:00:00
cvelist
cvelist
prion
prion
Cross site scripting
2022-03-11 18:15:00
patchstack
patchstack
fedora
fedora
[SECURITY] Fedora 34 Update: wordpress-5.8.4-1.fc34
2022-03-18 19:14:57
[SECURITY] Fedora 35 Update: wordpress-5.9.2-1.fc35
2022-03-18 20:08:15
[SECURITY] Fedora 36 Update: wordpress-5.9.2-1.fc36
2022-03-26 15:47:44
openvas
openvas
Fedora: Security Advisory for wordpress (FEDORA-2022-4b3079c1be)
2022-03-23 00:00:00
Fedora: Security Advisory for wordpress (FEDORA-2022-956b6078fb)
2022-03-23 00:00:00
Fedora: Security Advisory for wordpress (FEDORA-2022-706aac2786)
2022-03-27 00:00:00