CVE-2022-0248

MEDIUM

Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-0248 has a selected CVSS score of 6.1 (medium); EIP currently links 2 curated repository PoCs.

Description

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
2

Affected products and versions

1
ProductSourceVersion range

Contact Form Submissions

CVE List1.7.3 to < 1.7.3affected

Proofs of concept

2

Curated repository PoCs

GitHubCVE-2022-0248Curated repository PoCby yubsy112Not analyzed1 file

Python · 1.6 KiB

GitHub
PoC details
GitHubCVE-2022-0248Curated repository PoCby 0xd3vil127Not analyzed1 file

Python · 1.6 KiB

GitHub
PoC details

References

3