Reflected Cross-Site Scripting in BestWebSoft Contact Form Plugin for WordPress

CVE-2024-2198

What is CVE-2024-2198?

The Contact Form by BestWebSoft plugin for WordPress contains a reflected cross-site scripting vulnerability due to insufficient input sanitization and output escaping. An attacker can exploit this vulnerability by crafting a malicious URL that includes the ‘cntctfrm_contact_address’ parameter. When an unsuspecting user interacts with the link, malicious scripts could be injected into their browser session, potentially allowing attackers to manipulate the webpage or steal sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References