7.1
Élevée
CVE-2026-14870 The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and…
Description
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Database for Contact Form 7, WPforms, Elementor forms 1.5 | premières → < 1.5.3 | 1.5.3 |