CVE-2024-2242

The Contact Form 7 plugin before version 5.9.2 contains a cross-site scripting vulnerability that was discovered by Asaf Mozes. An attacker could exploit this flaw to inject arbitrary scripts into the website, enabling them to execute malicious code such as redirects, advertisements, or other HTML content when visitors access the site. The vulnerability was patched in version 5.9.2, and users should upgrade to this version or later to remediate the issue.

Based on public CVE data (MITRE/NVD).