First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-5809

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin users

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Unknown	WP Ajax Contact Form	<= 2.2.2
wp_ajax_contact_form	wp_ajax_contact_form_wordpress	<= 2.2.2

References

Timeline

Published: Jul 30, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-580905.5In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts are disabled David re CVE-2024-580915.5In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are not CVE-2024-580925.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4_l CVE-2024-580937.8In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-580945.5In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before truncation in jfs_truncate_nolock() Ad CVE-2024-580955.5In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon() call Added a read-only c CVE-2024-580965.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode ath CVE-2024-580975.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring Whi CVE-2024-580985.5In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When process CVE-2024-580995.5In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame Andrew and Ni CVE-2024-58105.3The WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 plugin for WordPress is vulnerable to unauthorized access in all versions up CVE-2024-581005.5In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When proce

CVE-2024-5809: Medium severity, CVSS 6.1 | Vulnix