Skip to content
Sign in
Not rated

CVE-2022-0250 The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it…

Description

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Redirection for Contact Form 7 2.5 earliest → < 2.5.0 2.5.0

Other CVEs of Redirection for Contact Form 7

The 3 CVEs of Redirection for Contact Form 7 →
CVE-2026-111574 The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored… 7.5 High CVE-2026-80439 The Redirection for Contact Form 7 WordPress plugin from 2.2.7 before 3.2.11 does not prevent shortcodes in submitted… 4.8 Medium
Track this CVE