Awesome Contact Form7 For Elementor Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in B.M. Rafiul Alam Awesome Contact Form7 for Elementor allows Stored XSS.This issue affects Awesome Contact Form7 for Elementor: from n/a through 3.0.

Affected:

up to 3.1

Fixed in:

3.1

Disclosed:

Oct 17, 2024

CVE-2024-49319 on NVD →

The Awesome Contact Form7 for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web...

CVSS:

6.4

Affected:

up to 3.0

Fixed in:

3.1

Disclosed:

Oct 15, 2024

CVE-2024-49319 on NVD →

[en] The Awesome Contact Form7 for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'AEP Contact Form 7' widget in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated at...

Affected:

up to 3.0

Fixed in:

3.0

Disclosed:

May 23, 2024

CVE-2024-4486 on NVD →

The Awesome Contact Form7 for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'AEP Contact Form 7' widget in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacke...

CVSS:

6.4

Affected:

up to 2.9

Fixed in:

3.0

Disclosed:

May 22, 2024

CVE-2024-4486 on NVD →