CVE-2022-21805
08.02.2022, 11:15
Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| econosys-system | php_mailform | 𝑥 < 1.4.0 |
𝑥
= Vulnerable software versions