6.5
Medium
CVE-2025-10019 Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email contact-form-to-email…
Description
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through <= 1.3.60.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form Email 1.3 | earliest → 1.3.60 | No fix stated |
Other CVEs of Contact Form Email
The 8 CVEs of Contact Form Email →
CVE-2026-112379
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact…
7.1
High
CVE-2026-32483
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Medium
CVE-2025-64369
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Medium
CVE-2025-24727
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact…
5.9
Medium