CVE-2022-25601

Description

Reflected Cross-Site Scripting (XSS) vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin (versions <= 2.4).

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://patchstack.com/database/vulnerability/contact-form-x/wordpress-contact-f…
• https://wordpress.org/plugins/contact-form-x/#developers
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…