Input validation vulnerability in Constant Contact Forms by MailMunch 2.1.2

A plugin called Constant Contact Forms by MailMunch for WordPress has a security issue known as Reflected Cross-Site Scripting. This is because it uses add_query_arg without proper protection on the URL. This vulnerability exists in all versions, including 2.1.2. This means that someone who is not logged in could potentially add harmful web scripts to a page by tricking a user into clicking on a link.

Detected in:

Constant Contact Forms by MailMunch open vulnerable versions: >= * <= 2.1.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.