CVE-2025-63068 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7…
Medium CVSS: 5.3

CVE-2025-63068

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Code Injection.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through <= 5.0.5.
Vendor
-
Product
-
CWE
CWE-80
Yayın Tarihi
2025-12-09 16:18:12
Güncelleme
2026-04-01 15:18:36
Source Identifier
audit@patchstack.com
KEV Date Added
-

Kategoriler

CWE-80 MEDIUM 2025

Referanslar

https://patchstack.com/database/Wordpress/Plugin/contact-form-7-dynamic-text-extension/vulnerability/wordpress-contact-form-7-dynamic-text-extension-plugin-5-0-3-content-injection-vulnerability?_s_id=cve