Stored Cross-Site Scripting Vulnerability in WordPress Forms Plugin by Contact Form 7

CVE-2024-3715

What is CVE-2024-3715?

The Database for Contact Form 7, WPforms, and Elementor forms plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability. This flaw arises from inadequate input sanitization and output escaping mechanisms present in all versions up to and inclusive of 1.3.8. Unauthenticated attackers can exploit this vulnerability to inject arbitrary web scripts, which may then execute whenever users access infected pages. This poses significant risks, especially for websites utilizing these plugins, as it could lead to unauthorized actions or the compromise of user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References