Crmperks Contact_form_entries
2 CVEs affecting Crmperks Contact_form_entries. Latest disclosed: 2022-01-24. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25080 | Medium | 6.1 | 2022-01-24 | The Contact Form Entries WordPress plugin before 1.1.7 does not validate, sanitise and escape the IP address retrieved via headers such as CLIENT-IP and X-FORW… |
CVE-2021-25079 | Medium | 6.1 | 2022-01-24 | The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and s… |