CVE-2021-36885

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contact-form-7-database-addon-cfdb7-plugin-1-2-6-1-unauthenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/contact-form-cfdb7 · Release Notes

Lỗ hổng khác của contact form 7 database addon

• CVE-2025-6740TRUNG BÌNH 6.1The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions…
• CVE-2022-3634NGHIÊM TRỌNG 9.8The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead…
• CVE-2021-36886CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
• CVE-2021-24144CAO 7.8Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attack…