Not rated
CVE-2023-2718 The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the…
Description
The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form Email 1.3 | earliest → < 1.3.38 | 1.3.38 |