Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fullworks | Quick Contact Form | ≤ 8.0.3.1 | — |
Medium · 6.5
CVE-2023-23885
EUVD-2023-27968GHSA-c49g-4rj2-vxxp
WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)
Published Apr 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack