Skip to content
OpenAdvisories
High · 7.1 CVE-2024-29130 EUVD-2024-26168GHSA-34c4-jgq5-j63f

WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.0.

Affected products

VendorProductAffectedFixed
Scott Paterson Contact Form 7 – PayPal & Stripe Add-on ≤ 2.0 —

References