Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webcodin WCP Contact Form plugin <= 3.1.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Webcodin | WCP Contact Form | ≤ 3.1.0 | — |
High · 7.1
CVE-2023-22703
EUVD-2023-26832GHSA-m44r-5qhx-4xfc
WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
Published May 15, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack