A3rev

Contact Us Page - Contact People

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-5123

  • EPSS 0.04%
  • Published 13.06.2025 01:47:50
  • Last modified 10.07.2025 00:38:57

The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and output escaping. This makes it pos...

6.5

CVE-2023-23973

  • EPSS 0.14%
  • Published 01.03.2023 13:15:10
  • Last modified 21.11.2024 07:47:11

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0.