Skip to content
OpenAdvisories

Vendor

rocklobsterinc

5 known vulnerabilities.

Products

Contact Form 7 3 Flamingo 1 Bogo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2024-2242 Public exploit

    Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting

    The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to, and including, 5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    rocklobsterinc Contact Form 7 Web / CMS