Known CVE

WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting

WordPress Contact Form 7 Skins plugin 2.5.0 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the tab parameter before outputting it back in an admin page.

CVE-2021-25063

Medium2021CVSS 6.1CWE-79

cve2021 · wpscan · wordpress · wp-plugin · xss · contactform · authenticated · cf7skins

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website