PT-2022-10604
CVE-2021-36913
·
Published
2022-10-11
·
Updated
2022-10-13
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Qube One Redirection for Contact Form 7 plugin version 2.4.0 and earlier
Description
The issue allows unauthenticated attackers to change options and inject scripts into the footer HTML, potentially leading to content injection. This requires an additional extension, AccessiBe.
Recommendations
For Qube One Redirection for Contact Form 7 plugin version 2.4.0 and earlier, update to a version later than 2.4.0 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾