Vulnerability Details CVE-2021-44097
EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php. This allows a remote attacker to compromise Application SQL database.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1
- https://medium.com/%40shubhamvpandey/cve-2021-44097-d51c11258571
- https://github.com/EGavilan-Media/Contact-Form-With-Messages-Entry-Management/issues/1
- https://medium.com/%40shubhamvpandey/cve-2021-44097-d51c11258571
Products affected by CVE-2021-44097
-
Contact-Form-With-Messages-Entry-Management Project » Contact-Form-With-Messages-Entry-Management » Version: 1.0cpe:2.3:a:contact-form-with-messages-entry-management_project:contact-form-with-messages-entry-management:1.0