Contact Form 7 expanded mail-tags across the entire "Additional headers" mail template in a single pass and appended the result to the outgoing message headers verbatim. A submitted form value containing a line break could therefore inject arbitrary extra headers, allowing a site visitor to add recipients (Bcc/Cc) and relay or covertly copy mail... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Email Header Injection in Contact Form 7 Mail Additional Headers
Contact Form 7 expanded mail-tags across the entire "Additional headers" mail template in a single pass and appended the result to the outgoing message headers verbatim. A submitted form value containing a line break could…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR