CVE-2022-21805: Econosys-System PHP Mailform

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

• Econosys-System PHP Mailform: before 1.4.0 (fixed in 1.4.0)

Published 2022-02-08. Last modified 2026-06-17.