Skip to content
OpenAdvisories
High · 7.1 CVE-2023-44245 EUVD-2023-48604GHSA-p6fg-9q8x-647w

WordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)

Published Oct 2, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Leap Product: Contractor Contact Form Website to Workflow Tool

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions.

Affected products

VendorProductAffectedFixed
Leap Contractor Contact Form Website to Workflow Tool ≤ 4.0.0 —

References