CVE-2022-2116

MEDIUM 6.1CVE-2022-2116 · Published 15/08/2022 · updated 17/06/2026

In short

CVE-2022-2116 is a MEDIUM (CVSS 6.1) vulnerability affecting contact form db - elementor (webacetechs).
Chance of exploitation in the next 30 days (EPSS): 0.64%, higher than 51.2% of all vulnerabilities.
Fix: update to 1.8.0 or later.

Package	Affected versions	Patched versions
contact form db - elementor webacetechs	`< 1.8.0`	`1.8.0`

Description

The Contact Form DB WordPress plugin before 1.8.0 does not sanitise and escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/01568da4-2ecf-4cf9-8030-31868ce0a87a · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free