CVE-2023-5141: BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting
The BSK Contact Form 7 Blacklist WordPress plugin through 1.0.1 does not sanitise and escape the insertedcount parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for BSK Contact Form 7 Blacklist plugin?
The vulnerability ID for BSK Contact Form 7 Blacklist plugin is CVE-2023-5141.
What is the severity of CVE-2023-5141?
The severity of CVE-2023-5141 is medium with a CVSS score of 6.1.
What is the description of CVE-2023-5141?
CVE-2023-5141 is a Reflected Cross-Site Scripting vulnerability in the BSK Contact Form 7 Blacklist WordPress plugin through version 1.0.1.
What software is affected by CVE-2023-5141?
The BSK Contact Form 7 Blacklist plugin version 1.0.1 is affected by CVE-2023-5141 in WordPress.
How can the CVE-2023-5141 vulnerability be exploited?
The vulnerability can be exploited by inserting malicious code in the inserted_count parameter, leading to a Reflected Cross-Site Scripting attack.