WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting
WordPress All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs plugin before 2.0.4 contains a reflected cross-site scripting vulnerability on the my-sticky-elements-leads admin page.
mystickyelementsPoC 已收录
CVSS5.4EPSS 6.6%