WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting
WordPress Contact Form 7 Skins plugin 2.5.0 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the tab parameter before outputting it back in an admin page.
contact_form_7_skinsPoC 已收录
CVSS6.1EPSS 1.2%