Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site Scripting
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.5%
exploitation probability
1.5%top 28% of all CVEs
observed exploitation
nono source reports it
The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting
Affected products
Unknown · Redirection for Contact Form 7