Vulnerabilities > CVE-2022-4226 - Unspecified vulnerability in Wpkube Simple Basic Contact Form

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

wpkube

NVD

Published: 2022-12-26

Updated: 2023-11-07

Summary

The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Vulnerable Configurations

Part	Description	Count
Application	Wpkube Wpkube Simple Basic Contact Form - Wpkube Simple Basic Contact Form 20121103 Wpkube Simple Basic Contact Form 20121205 Wpkube Simple Basic Contact Form 20130104 Wpkube Simple Basic Contact Form 20130712 Wpkube Simple Basic Contact Form 20130725 Wpkube Simple Basic Contact Form 20131106 Wpkube Simple Basic Contact Form 20131107 Wpkube Simple Basic Contact Form 20140123 Wpkube Simple Basic Contact Form 20140305 Wpkube Simple Basic Contact Form 20140925 Wpkube Simple Basic Contact Form 20150317 Wpkube Simple Basic Contact Form 20150507 Wpkube Simple Basic Contact Form 20150808 Wpkube Simple Basic Contact Form 20151111 Wpkube Simple Basic Contact Form 20160408 Wpkube Simple Basic Contact Form 20160813 Wpkube Simple Basic Contact Form 20161117 Wpkube Simple Basic Contact Form 20170325 Wpkube Simple Basic Contact Form 20170801 Wpkube Simple Basic Contact Form 20171024 Wpkube Simple Basic Contact Form 20171102 Wpkube Simple Basic Contact Form 20171103 Wpkube Simple Basic Contact Form 20180528 Wpkube Simple Basic Contact Form 20180602 Wpkube Simple Basic Contact Form 20181001 Wpkube Simple Basic Contact Form 20181212 Wpkube Simple Basic Contact Form 20190305 Wpkube Simple Basic Contact Form 20190621 Wpkube Simple Basic Contact Form 20190926 Wpkube Simple Basic Contact Form 20191009 Wpkube Simple Basic Contact Form 20191024 Wpkube Simple Basic Contact Form 20200207 Wpkube Simple Basic Contact Form 20200219 Wpkube Simple Basic Contact Form 20200324 Wpkube Simple Basic Contact Form 20200901 Wpkube Simple Basic Contact Form 20201229 Wpkube Simple Basic Contact Form 20210129 Wpkube Simple Basic Contact Form 20210323 Wpkube Simple Basic Contact Form 20210409 Wpkube Simple Basic Contact Form 20210619 Wpkube Simple Basic Contact Form 20220207	42

References

https://wpscan.com/vulnerability/c5ca22e0-b7a5-468d-8366-1855ff33851b