CVE-2018-20963

The contact-form-to-email plugin before 1.2.66 for WordPress has XSS.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-08-13

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Contact Form Email (Codepeople)

References

• https://wordpress.org/plugins/contact-form-to-email/#developers