WordPress security by component

Popup Contact Form

Plugin description

Popup Contact Form is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 02, 2023; the highest CVE/CNA score is 5.9.

Plugin slug: popup-contact-form

Latest vulnerability

CVE-2023-44265: Popup Contact Form: Cross-site scripting

Popup Contact Form is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedOct 02, 2023

Safe version guidanceSee mitigation notes

		Safe version
Oct 02, 2023	CVE-2023-44265 Popup Contact Form: Cross-site scripting Popup Contact Form is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.9 NVD4.8
Oct 02, 2023	CVE-2023-44230 Popup Contact Form: Cross-site scripting Popup Contact Form is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.9 NVD4.8