CVE-2022-29408

概要

参考情報

• patchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persistent-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/advanced-cf7-db · Product

advanced cf7 db のその他の脆弱性

• CVE-2022-45285中 6.1Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).
• CVE-2021-24905高 8.0The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete…
• CVE-2019-13571緊急 9.8A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of th…