← All advisories

High severity7.1NVD Advisory· Published Oct 2, 2023· Updated Jun 17, 2026

CVE-2023-44245

CVE-2023-44245

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Leaptodigital/Contact Form Website To Workflow Tool
cpe:2.3:a:leaptodigital:contact_form_website_to_workflow_tool:*:*:*:*:*:wordpress:*:*
Range: <=4.0.0
WordPress/Contractor Contact Form Website to Workflow Toolllm-create
Range: <=4.0.0
Leap/Contractor Contact Form Website to Workflow Toolv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/contractor-contact-form-website-to-workflow-tool/wordpress-contractor-contact-form-website-to-workflow-tool-plugin-4-0-0-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.