medium6.1
CVE-2022-21805
Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker …
Impact
Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Econosys-System | Php Mailform | before 1.4.0 |