← CVE Intelligence

CVE-2026-49055

WordPress Drag and Drop Multiple File Upload – Contact Form 7 plugin <= 1.3.9.7 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.

Affected (CNA)

Vendor / productVersions
Glen Don Mongaya / Drag and Drop Multiple File Upload – Contact Form 7affected n/a through 1.3.9.7

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.