Skip to content
OpenAdvisories

Vendor

bitacre

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    Super Simple Contact Form <= 1.6.2 - Reflected Cross-Site Scripting via 'sscf_name' Parameter

    The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for…