Skip to content

CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-40191

WordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-09-09
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ali Khallad Contact Form By Mega Forms (WordPress plugin)

<= 1.2.4 to ≤ 1.2.4affected

References