← CVE Intelligence

CVE-2022-2187

Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

Affected (CNA)

Vendor / productVersions
Unknown / Contact Form 7 Captchaaffected 0.1.2 before 0.1.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.