CVE-2022-22142

Name of the Vulnerable Software and Affected Versions php mailform versions prior to 1.40

Description A reflected cross-site scripting issue in the checkbox of php mailform allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Recommendations For versions prior to 1.40, update to version 1.40 or later to resolve the issue. As a temporary workaround, consider restricting access to the checkbox feature in php mailform until the update is applied.