CVE-2022-47608: WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)
Published Apr 25, 2023
·Updated
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <= 8.0.3.1 versions.
Affected Software
1 affected component
Fullworksplugins Quick Contact Form Wordpress<8.0.4
Remediation
Information
Update to 8.0.4 or a higher version.
Event History
Apr 25, 2023
CVE Published
via MITRE·04:56 PM
Data Sourced
via MITRE·04:56 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-47608?
CVE-2022-47608 is a Authentication (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin versions <= 8.0.3.1.
2
How severe is CVE-2022-47608?
CVE-2022-47608 has a severity rating of medium with a CVSS score of 4.8.
3
What is the affected software for CVE-2022-47608?
The affected software for CVE-2022-47608 is Fullworks Quick Contact Form plugin versions <= 8.0.3.1.
4
How can I fix CVE-2022-47608?
To fix CVE-2022-47608, update the Fullworks Quick Contact Form plugin to version 8.0.4 or higher.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-47608?
CVE-2022-47608 is associated with CWE-79, which is the classification for Improper Neutralization of Input During Web Page Generation (XSS).