Description
Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin (versions <= 2.4).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jeff Starr | Contact Form X (WordPress plugin) | <= 2.4 – ≤ 2.4 | — |
References
- https://wordpress.org/plugins/contact-form-x/#developers
- https://patchstack.com/database/vulnerability/contact-form-x/wordpress-contact-form-x-plugin-2-4-authenticated-reflected-cross-site-scripting-xss-vulnerability
- FEDORA-2022-4b3079c1be vendor-advisory
- FEDORA-2022-956b6078fb vendor-advisory
- FEDORA-2022-706aac2786 vendor-advisory