Vulnerabilities > CVE-2022-2116 - Unspecified vulnerability in Webacetechs Contact Form DB - Elementor

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

webacetechs

NVD

Published: 2022-08-15

Updated: 2024-11-21

Summary

The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Vulnerable Configurations

Part	Description	Count
Application	Webacetechs Webacetechs Contact Form DB Elementor - Webacetechs Contact Form DB Elementor 1.1 Webacetechs Contact Form DB Elementor 1.2 Webacetechs Contact Form DB Elementor 1.3 Webacetechs Contact Form DB Elementor 1.4 Webacetechs Contact Form DB Elementor 1.5 Webacetechs Contact Form DB Elementor 1.6 Webacetechs Contact Form DB Elementor 1.7	8

References

https://wpscan.com/vulnerability/01568da4-2ecf-4cf9-8030-31868ce0a87a
https://wpscan.com/vulnerability/01568da4-2ecf-4cf9-8030-31868ce0a87a