TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot vulnerabilities
1 known vulnerability in TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot from Pechenki. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
TelSender – Сontact form 7, Events, Wpforms…: Improper Neutralization of Input During Web Page Generation
The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This is due to insufficient input sanitization when processing Telegram API responses containing attacker-controlled chat titles.