CVE-2023-33311: WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CRM Perks Contact Form Entries plugin <= 1.3.0 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Contact Form Entries Pluginto a version that resolves this vulnerability.Fixed in 1.3.1
Event History
Frequently Asked Questions
What is CVE-2023-33311?
CVE-2023-33311 is a Stored Cross-Site Scripting (XSS) vulnerability in the CRM Perks Contact Form Entries plugin.
What is the severity of CVE-2023-33311?
The severity of CVE-2023-33311 is medium, with a severity value of 5.4.
Which software versions are affected by CVE-2023-33311?
The CRM Perks Contact Form Entries plugin versions up to and including 1.3.0 are affected by CVE-2023-33311.
How can I fix CVE-2023-33311?
To fix CVE-2023-33311, upgrade to a version of the CRM Perks Contact Form Entries plugin that is higher than 1.3.0.
What is the CWE category for CVE-2023-33311?
The CWE category for CVE-2023-33311 is CWE-79 (Improper Neutralization of Input During Web Page Generation).