Read the docs

zealopensource

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

zealopensource records in CISA KEV

No zealopensource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Generate Pdf Using Contact Form 7 4 records MEDIUM Accept Stripe Payments Using Contact Form 7 1 record LOW Track Geolocation Of Users Using Contact Form 7 1 record LOW

Records

4 records in Generate Pdf Using Contact Form 7 · all components

TI-2022-02832 CVE-2022-3070 · GHSA-pf9p-4wwq-p4gf

Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The Generate PDF WordPress plugin before 3.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00684 Published 2022-09-26 Fixed in 3.6 CWE-79
TI-2024-25055 CVE-2024-37555 · GHSA-87hq-g7fx-6x68

WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7.This issue affects Generate PDF using Contact Form 7: from n/a through <= 4.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-07-09 No fix listed CWE-434
Open these records in search →