Cf7skins

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cf7skins records in CISA KEV

No Cf7skins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contact Form 7 Skins 1 record LOW

Records

1 record

TI-2021-07341 CVE-2021-25063 · GHSA-g78w-xr4j-vmwx

Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)

LOW 31

The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0208 Published 2022-02-01 Fixed in 2.5.1 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0