CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24144

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.3%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2021-24144

Ciphercoin » Contact Form 7 Database Addon » Version: 1.0.0

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.0.0
Ciphercoin » Contact Form 7 Database Addon » Version: 1.2.4.10

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.2.4.10
Ciphercoin » Contact Form 7 Database Addon » Version: 1.2.4.11

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.2.4.11
Ciphercoin » Contact Form 7 Database Addon » Version: 1.2.5

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.2.5
Ciphercoin » Contact Form 7 Database Addon » Version: 1.2.5.3

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.2.5.3
Ciphercoin » Contact Form 7 Database Addon » Version: 1.2.5.4

cpe:2.3:a:ciphercoin:contact_form_7_database_addon:1.2.5.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24144

Products

Pricing

Contact Us