← All advisories

Medium severity5.4NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026

CVE-2022-40191

CVE-2022-40191

Description

Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Contact Form By Mega Formsllm-create
Range: <=1.2.4
Ali Khallad/Contact Form By Mega Forms (WordPress plugin)v5
Range: <= 1.2.4

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/mega-forms/wordpress-contact-form-by-mega-forms-plugin-1-2-4-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cvenvdThird Party Advisory
wordpress.org/plugins/mega-forms/nvdProductRelease Notes

News mentions

0

No linked articles in our index yet.