Vulnerabilities (CVE)

Filtered by vendor Hotscot Subscribe
Filtered by product Contact Form
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24777 1 Hotscot 1 Contact Form 2024-11-21 6.5 MEDIUM 7.2 HIGH
The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leading to an SQL injection.