CVE-2026-40807 Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form…

Description

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
CF7 Views – Complete Entry Management for Contact Form 7 3.2	earliest → 3.2.6	No fix stated

Other CVEs of CF7 Views &#8211; Complete Entry Management for Contact Form 7

The 3 CVEs of CF7 Views &#8211; Complete Entry Management for Contact Form 7 →

CVE-2026-100513 Contributor Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form… 6.5 Medium CVE-2026-57411 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views… 7.1 High