← Database

CVE-2022-50960

MEDIUM CVSS: 6.1 Published: 2026-05-10 Modified: 2026-07-24

Description

WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface. Attackers can inject malicious scripts through the page parameter in class-sms-log-display.php to execute arbitrary JavaScript in administrator browsers.

Affected Platforms

Unknown

Weakness Type

CWE-79

References