CVE-2024-30549
WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact Forms by Cimatti: from n/a through <= 1.8.0.
| CWE | CWE-79 |
| Vendor | cimatti |
| Product | contact forms by cimatti |
| Published | Mar 31, 2024 |
| Last Updated | Apr 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for cimatti contact forms by cimatti
Be the first to know when new unknown vulnerabilities affecting cimatti contact forms by cimatti are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
cimatti / Contact Forms by Cimatti
0 ≤ 1.8.0
References
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/contact-forms/vulnerability/wordpress-contact-forms-by-cimatti-plugin-1-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve patchstack.com: https://patchstack.com/database/vulnerability/contact-forms/wordpress-contact-forms-by-cimatti-plugin-1-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve
Credits
Joel Indra | Patchstack Bug Bounty Program