Approved changes feed: RSS · Atom

cpe:2.3:a:gsheetconnector:cf7_google_sheets_connector:*:*:*:*:pro:wordpress:*:*

part: a version: * update: *

VendorGsheetconnector (ea525067-3041-5a65-81ac-4345522a7a7c)
ProductCf7 Google Sheets Connector (f17c30df-e328-5680-afa0-5b26cb843bf0)
Edition*
Language*
Software editionpro
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2320 vulnerable 2026-06-08 06:02:42.064709 CF7 Google Sheets Connector < 5.0.2 - Reflected XSS
The CF7 Google Sheets Connector WordPress plugin before 5.0.2, cf7-google-sheets-connector-pro WordPress plugin through 5.0.2 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2023-07-04T07:23:30.440Z
Updated: 2024-11-26T18:53:00.307Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.