Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Martin SimpleModal Contact Form (SMCF) plugin <= 1.2.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eric Martin | SimpleModal Contact Form (SMCF) | ≤ 1.2.9 | — |
Medium · 5.9
CVE-2023-29438
EUVD-2023-33007GHSA-ccpg-6x98-8v6f
WordPress SimpleModal Contact Form (SMCF) Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
Published Jun 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack