VYPR

Skins For Contact Form 7

by WordPress

CVEs (1)

  • CVE-2021-25063MedFeb 1, 2022
    risk 0.40cvss 6.1epss 0.02

    The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting