PT-2025-37295
CVE-2025-8280
·
Published
2025-08-22
·
Updated
2026-03-16
Description by
CVSS 3.1
5.8
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
Contact Form 7 reCAPTCHA WordPress plugin versions through 1.2.0
Description:
The plugin does not escape the
$ SERVER['REQUEST URI'] parameter before outputting it, potentially leading to Reflected Cross-Site Scripting in older web browsers.Recommendations:
Update to a version beyond 1.2.0.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾