CVE-2022-0250: vulnerability in Redirection for Contact Form 7
Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.6%
exploitation probability
1.6%top 24% of all CVEs
observed exploitation
nono source reports it
The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting
Affected products
Unknown · Redirection for Contact Form 7Related CVEs — Redirection for Contact Form 7
In the same product, most dangerous first.