CVE-2022-29408

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

Score

CVSS 3.1 6.1 Medium

Status

Modified - audit@patchstack.com

Published

2022-05-25

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Advanced Cf7 Db (Vsourz)
• Advanced Contact Form 7 Db Wordpress Plugin (Vsourz Digital)

References

• https://patchstack.com/database/vulnerability/advanced-cf7-db/wordpress-advanced-contact-form-7-db-plugin-1-8-7-persist…
• https://wordpress.org/plugins/advanced-cf7-db/