Read the docs

Form - Contact Form Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Form - Contact Form Project records in CISA KEV

No Form - Contact Form Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Form - Contact Form 1 record LOW

Records

1 record

TI-2022-01208 CVE-2022-1326 · GHSA-6g66-pc73-cqw9

Form - Contact Form <= 1.2.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_h…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-06-27 No fix listed CWE-79
Open these records in search →