https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T21:37:14.413248+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111574 fkie_cve-2026-111574 2026-10-24T21:37:14.414933+00:00

The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries before outputting it in the lead debug metabox, allowing unauthenticated attackers to store a malicious script that executes when a logged-in user views the entry with the Redirection for Contact Form 7 WordPress plugin before 3.2.12's debug mode enabled.

 https://db.gcve.eu/vuln/ghsa-fm6v-w7hr-3xm4 GHSA-fm6v-w7hr-3xm4 2026-10-24T21:37:14.415004+00:00

The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries before outputting it in the lead debug metabox, allowing unauthenticated attackers to store a malicious script that executes when a logged-in user views the entry with the Redirection for Contact Form 7 WordPress plugin before 3.2.12's debug mode enabled.