| |
Vulnerability CVE-2023-2718
Published: 2023-06-12
| Description: |
The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/8ad824a6-2d49-4f02-8252-393c59aa9705
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
