← All advisories

Medium severity6.5NVD Advisory· Published May 28, 2023· Updated Jun 17, 2026

CVE-2023-33311

CVE-2023-33311

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CRM Perks Contact Form Entries plugin <= 1.3.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Contact Form Entriesllm-fuzzy
Range: <=1.3.0
Package: https://wordpress.org/plugins/contact-form-entries
Crmperks/Contact Form Entries Contact Form 7 Wpforms And More
cpe:2.3:a:crmperks:contact_form_entries_-_contact_form_7_wpforms_and_more:*:*:*:*:*:wordpress:*:*
Range: <=1.3.0
Crmperks/Contact Form Entriescpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/contact-form-entries/wordpress-contact-form-entries-plugin-1-3-0-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.