Reflected XSS Vulnerability in Contact Form 7 - PayPal & Stripe Add-on

CVE-2024-29130

What is CVE-2024-29130?

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Scott Paterson Contact Form 7 – PayPal & Stripe Add-on, allowing attackers to inject malicious scripts into web pages. This issue can lead to unauthorized actions on behalf of users, potentially compromising sensitive information and accounts. The vulnerability affects all versions from n/a through version 2.0 of the add-on, making it critical for users to apply patches and updates to secure their applications against this exploit.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References