Skip to content
OpenAdvisories

Vendor

itpathsolutions

3 known vulnerabilities.

Products

Contact Form to Any API 2 Any Post Slider 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-7617

    Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form

    The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for una…

    itpathsolutions Contact Form to Any API Web / CMS