Read the docs

Hotscot

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hotscot records in CISA KEV

No Hotscot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form 1 record LOW

Records

1 record

TI-2021-07059 CVE-2021-24777 · GHSA-9j9f-c66r-6h93

Hotscot Contact Form < 1.3 - Admin+ SQL Injection

Priority LOW 34

The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leadi…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01301 Published 2022-03-07 Fixed in 1.3 CWE-89
Open these records in search →