Description (CNA)
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qube One / Redirection for Contact Form 7 (WordPress plugin) | affected <= 2.4.0 through 2.4.0 |
CWE
CWE-284
References
- https://patchstack.com/database/vulnerability/wpcf7-redirect/wordpress-redirection-for-contact-form-7-plugin-2-4-0-unauthenticated-options-change-vulnerability?_s_id=cve
- https://wordpress.org/plugins/wpcf7-redirect/#developers
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.