Contact Form By Mega Forms
1 CVEs
product
Monthly
Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
WordPress
XSS
Wordpress Plugin
Contact Form By Mega Forms
NVD
CVSS 3.1
5.4
EPSS
0.5%
EPSS 0%
CVSS 5.4
MEDIUM
This Month
Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
WordPress
XSS
Wordpress Plugin
+1
NVD