WordPress Plugin Vulnerabilities

Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected XSS

Description

The contact-form-7-dynamic-text-extensio WordPress plugin was affected by a Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
contact-form-7-dynamic-text-extensio
Fixed in 2.0.3

References

URL
https://sevenspark.com/docs/cf7-dtx-security-2019-07-24

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
830abfe5-831c-4dc8-98f8-df8252b56a5c

Timeline

Publicly Published
2019-07-24 (about 6 years ago)
Added
2019-07-25 (about 6 years ago)
Last Updated
2019-11-27 (about 6 years ago)

Other

Published
Title
Published
2025-04-02
Title
Tiger <= 2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2025-01-03
Title
Target Notifications <= 1.1.1 - Reflected Cross-Site Scripting
Published
2023-06-15
Title
CHP Ads Block Detector < 3.9.8 - Subscriber+ Stored Cross-Site Scripting
Published
2014-05-28
Title
Easy Career Opening <= 0.4 - Cross-Site Scripting (XSS)
Published
2025-04-10
Title
Cool Flipbox – Shortcode & Gutenberg Block < 1.9.0 - Reflected Cross-Site Scripting