Redirection-For-Contact-Form7: >> Redirection For Contact Form 7 >> 1.2.5 Security Vulnerabilities
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-10-11
The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting
CVSS Score
6.1
EPSS Score
0.008
Published
2022-07-04