Skip to content
Threat Feed
Subscribe

Product

Infility Global Plugin for WordPress (2.15.21)

1 brief RSS
high advisory

Stored Cross-Site Scripting in Infility Global WordPress Plugin

The Infility Global WordPress plugin is vulnerable to Stored XSS via the /cf7_record endpoint, allowing unauthenticated attackers to execute arbitrary scripts in the context of authenticated users.

Infility Global plugin for WordPress web-application xss wordpress
1r 2t 1c