CVE-2023-2803: Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-2803?
CVE-2023-2803 is a vulnerability in the Ultimate Addons for Contact Form 7 WordPress plugin that allows for Reflected Cross-Site Scripting attacks.
What is the severity of CVE-2023-2803?
The severity of CVE-2023-2803 is medium with a CVSS score of 6.1.
How does CVE-2023-2803 affect the Ultimate Addons for Contact Form 7 plugin?
CVE-2023-2803 affects the Ultimate Addons for Contact Form 7 plugin by not sanitizing and escaping a parameter before outputting it back in the page, which allows for Reflected Cross-Site Scripting attacks.
How can I fix CVE-2023-2803?
To fix CVE-2023-2803, update the Ultimate Addons for Contact Form 7 WordPress plugin to version 3.1.29 or newer.
Is there any additional information available for CVE-2023-2803?
Yes, you can find more information about CVE-2023-2803 at the following reference link: [Reference](https://wpscan.com/vulnerability/ec640d47-bb22-478d-9668-1dab72f12f8d)