mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 05:17:47 +02:00
907 B
907 B
CVE-2021-25079
Description
The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and search before outputting them back in the admin page
POC
Reference
- https://wpscan.com/vulnerability/c3d49271-9656-4428-8357-0d1d77b7fc63
- https://wpscan.com/vulnerability/c3d49271-9656-4428-8357-0d1d77b7fc63
Github
No PoCs found on GitHub currently.