CVE-2022-50960: Varun Sridharan International Sms For Contact Form

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface. Attackers can inject malicious scripts through the page parameter in class-sms-log-display.php to execute arbitrary JavaScript in administrator browsers.

Affected products

• Varun Sridharan International Sms For Contact Form: version 1.2 only

Published 2026-05-10. Last modified 2026-07-24.