Vulnerabilities > CVE-2022-0248 - Unspecified vulnerability in Contact Form Submissions Project Contact Form Submissions

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

contact-form-submissions-project

NVD

Published: 2022-03-14

Updated: 2024-11-21

Summary

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission

Vulnerable Configurations

Part	Description	Count
Application	Contact_Form_Submissions_Project Contact Form Submissions Project Contact Form Submissions 1.0 Contact Form Submissions Project Contact Form Submissions 1.0.1 Contact Form Submissions Project Contact Form Submissions 1.1 Contact Form Submissions Project Contact Form Submissions 1.2 Contact Form Submissions Project Contact Form Submissions 1.2.1 Contact Form Submissions Project Contact Form Submissions 1.2.2 Contact Form Submissions Project Contact Form Submissions 1.3 Contact Form Submissions Project Contact Form Submissions 1.3.1 Contact Form Submissions Project Contact Form Submissions 1.3.2 Contact Form Submissions Project Contact Form Submissions 1.3.3 Contact Form Submissions Project Contact Form Submissions 1.4 Contact Form Submissions Project Contact Form Submissions 1.4.1 Contact Form Submissions Project Contact Form Submissions 1.5 Contact Form Submissions Project Contact Form Submissions 1.5.1 Contact Form Submissions Project Contact Form Submissions 1.5.3 Contact Form Submissions Project Contact Form Submissions 1.5.4 Contact Form Submissions Project Contact Form Submissions 1.5.5 Contact Form Submissions Project Contact Form Submissions 1.5.6 Contact Form Submissions Project Contact Form Submissions 1.5.7 Contact Form Submissions Project Contact Form Submissions 1.5.8 Contact Form Submissions Project Contact Form Submissions 1.5.9 Contact Form Submissions Project Contact Form Submissions 1.6 Contact Form Submissions Project Contact Form Submissions 1.6.1 Contact Form Submissions Project Contact Form Submissions 1.6.2 Contact Form Submissions Project Contact Form Submissions 1.6.3 Contact Form Submissions Project Contact Form Submissions 1.6.4	26

Summary

Vulnerable Configurations

References