CVE-2023-24420

中危 6.1CVE-2023-24420 · Published 15/06/2023 · updated 17/06/2026

要点

CVE-2023-24420 是影响 admin side data storage for contact form 7 (zestard) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.38%，高于 32.4% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
admin side data storage for contact form 7 zestard	`≤ 1.1.1`	No fix yet

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin <= 1.1.1 versions.

References

patchstack.com/database/vulnerability/admin-side-data-storage-for-contact-form-7/wordpress-admin-side-data-storage-for-contact-form-7-plugin-1-1-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

admin side data storage for contact form 7 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

admin side data storage for contact form 7

zestard

≤ 1.1.1

No fix yet

admin side data storage for contact form 7 的其他漏洞

查看全部 →