Read the docs

Contact-form-7-datepicker Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Contact-form-7-datepicker Project records in CISA KEV

No Contact-form-7-datepicker Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact-form-7-datepicker 1 record LOW

Records

1 record

TI-2020-09236 CVE-2020-11516 · GHSA-74vr-xxv2-w25v

Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows…

Priority LOW 26

Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minimal permissions to save arbitrary JavaScript to the plugin's settings via the unprotected wp_ajax_cf7…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00712 Published 2020-04-07 No fix listed CWE-79
Open these records in search →