Advisories · Technology
Drag and Drop Multiple File Upload for Contact Form 7.
Every CVE that names Drag and Drop Multiple File Upload for Contact Form 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass
- Drag and Drop Multiple File Upload for Contact Form 7
- Code injection
- CVSS 3.5 Low
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting
- Drag and Drop Multiple File Upload for Contact Form 7
- Cross-site scripting (XSS)