Vulnerabilities > CVE-2022-0250 - Unspecified vulnerability in Redirection-For-Contact-Form7 Redirection for Contact Form 7

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
redirection-for-contact-form7

Summary

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting

Vulnerable Configurations

Part Description Count
Application
Redirection-For-Contact-Form7
35