The mail component of the ContactForm 7 is not properly escaped against an XSS attack.
This vulnerability affects the following application versions:
- Contact Form 7 4.6
- Contact Form 7 4.6.1
- Contact Form 7 4.7
- Contact Form 7 4.8
- Contact Form 7 4.8.1
- Contact Form 7 4.9
- Contact Form 7 4.9.1
- Contact Form 7 4.9.2
- Contact Form 7 5.0
- Contact Form 7 5.0.1
- Contact Form 7 5.0.2
- Contact Form 7 5.0.3
- Contact Form 7 5.0.4
- Contact Form 7 5.0.5
- Contact Form 7 5.1
- Contact Form 7 5.1.1
- Contact Form 7 5.1.2
- Contact Form 7 5.1.3
- Contact Form 7 5.1.4
- Contact Form 7 5.1.5
- Contact Form 7 5.1.6
- Contact Form 7 5.1.7
- Contact Form 7 5.1.8
- Contact Form 7 5.1.9
- Contact Form 7 5.2
- Contact Form 7 5.2.1
- Contact Form 7 5.2.2
- Contact Form 7 5.3
- Contact Form 7 5.3.1
- Contact Form 7 5.3.2
- Contact Form 7 5.4
- Contact Form 7 5.4.1
- Contact Form 7 5.4.2
- Contact Form 7 5.5
- Contact Form 7 5.5.1
- Contact Form 7 5.5.2
- Contact Form 7 5.5.3
- Contact Form 7 5.5.4
- Contact Form 7 5.5.5
- Contact Form 7 5.5.6
- Contact Form 7 5.5.6.1
- Contact Form 7 5.6
- Contact Form 7 5.6.1
- Contact Form 7 5.6.2
- Contact Form 7 5.6.3
- Contact Form 7 5.6.4
- Contact Form 7 5.7
- Contact Form 7 5.7.1
- Contact Form 7 5.7.2
- Contact Form 7 5.7.3