3 Comments

  1. Yordan Soares
    · Reply

    It would be good to clarify that this only affects forms that use file upload fields. On the other hand, Contact Form 7 does not store files in the directory, but deletes them immediately after sending. So, in practice it’s not possible for a script to be executed because it’s sent and deleted immediately afterwards.

    Report

  2. LABCAT
    · Reply

    Yes, I also wondering if this only affects forms with file upload fields.

    Report

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: