Not rated
CVE-2021-24125 Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the…
Description
Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privilege user (admin+)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form Submissions 1.7 | earliest → < 1.7.1 | 1.7.1 |