Stored XSS Vulnerability in Bit Form Contact Form Plugin
CVE-2024-47301
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 6 October 2024
What is CVE-2024-47301?
A security vulnerability exists in the Bit Form β Contact Form Plugin due to improper neutralization of user input during web page generation, leading to a Cross-site Scripting (XSS) risk. This vulnerability allows an attacker to inject malicious scripts into the web application, which can then be executed in the context of another user's session. It impacts all versions of the Bit Form β Contact Form Plugin up to and including version 2.13.10. Attackers exploiting this vulnerability could potentially gain unauthorized access to sensitive information or carry out other malicious actions by manipulating user interactions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Bit Form β Contact Form Plugin <= 2.13.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved