Skip to content
OpenAdvisories
High · 7.1 CVE-2024-54343 EUVD-2024-52466GHSA-4863-57r9-m6xc

WordPress Connect Contact Form 7 to Constant Contact plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thehowarde Connect Contact Form 7 to Constant Contact connect-contact-form-7-to-constant-contact-v3 allows Reflected XSS.This issue affects Connect Contact Form 7 to Constant Contact: from n/a through <= 1.4.

Affected products

VendorProductAffectedFixed
thehowarde Connect Contact Form 7 to Constant Contact ≤ 1.4 —

References