Lucene search
PRIOn knowledge basePRION:CVE-2022-0248HistoryMar 14, 2022 - 3:15 p.m.
Cross site scripting
2022-03-1415:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
31.6%
The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission
| CPE | Name | Operator | Version |
|---|---|---|---|
| contact_form_submissions | lt | 1.7.3 |
Related
nvd
nvd
CVE-2022-0248
2022-03-14 15:15:09
patchstack
patchstack
cnvd
cnvd
WordPress Contact Form Submissions plugin cross-site scripting vulnerability
2022-03-16 00:00:00
wpvulndb
wpvulndb
Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
2022-02-21 00:00:00
cve
cve
CVE-2022-0248
2022-03-14 15:15:09
cvelist
cvelist
CVE-2022-0248 Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
2022-03-14 14:41:25
wpexploit
wpexploit
Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
2022-02-21 00:00:00