Design/Logic Flaw

2022-10-1118:15:00

PRIOn knowledge base

www.prio-n.com

wordpress

vulnerability

qube one redirection

contact form 7

options change

content injection

accessibe

nvd

0.001 Low

EPSS

Percentile

26.7%

JSON

Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.

CPENameOperatorVersion
redirection_for_contact_form_7lt2.6.0

CPE	Name	Operator	Version
	redirection_for_contact_form_7	lt	2.6.0

References

patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-4-0-unauthenticated-options-change-vulnerability?_s_id=cve

wordpress.org/plugins/wpcf7-redirect/

0.001 Low

EPSS

Percentile

26.7%

JSON

Related for PRION:CVE-2021-36913