Medium · 4.7 CVE-2022-29408 EUVD-2022-33746GHSA-x6xc-r9j4-hqp7

WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability

Published May 25, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

Vendor	Product	Affected	Fixed
Vsourz Digital	Advanced Contact form 7 DB (WordPress plugin)	<= 1.8.7 – ≤ 1.8.7	—