← Back

Contact Form

contact_form

Vendor: Hotscot • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24777
1Hotscot
1Contact Form
Jun 17, 2026
Mar 7, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leadi...Show more
The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leading to an SQL injection.Show less