Ari-soft Contact_form_7_connector
2 CVEs affecting Ari-soft Contact_form_7_connector. Latest disclosed: 2024-02-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0239 | Medium | 6.1 | 2024-01-16 | The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect… |
CVE-2024-24884 | Medium | 4.3 | 2024-02-12 | Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2. |