Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Codesmade Clear all filters
TI-2023-04607 CVE-2023-5005 · GHSA-7cr4-32jg-hwx2

Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site Scripting

Priority MEDIUM 55

The Autocomplete Location field Contact Form 7 WordPress plugin before 3.0, autocomplete-location-field-contact-form-7-pro WordPress plugin before 2.0 does not sanitise and escape some of its settings, which could allow…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-12-18 Fixed in 3.0, 2.0 CWE-79