Vulnerability CVE-2022-25601


Published: 2022-03-11

Description:
Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin (versions <= 2.4).

 References:
https://wordpress.org/plugins/contact-form-x/#developers
https://patchstack.com/database/vulnerability/contact-form-x/wordpress-contact-form-x-plugin-2-4-authenticated-reflected-cross-site-scripting-xss-vulnerability

Copyright 2026, cxsecurity.com

 

Back to Top