Vulnerabilities

TI-2023-02159 CVE-2023-2302 · GHSA-7mhc-cwhq-2r88

Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 29

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 2.6.4 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00518 Published 2023-06-03 No fix listed CWE-79

TI-2023-02160 CVE-2023-2303 · GHSA-r4rj-qf4g-q99w

Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 27

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2023-06-03 No fix listed CWE-352

Vulnerabilities

Filters

Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting