7.1
High
CVE-2026-112379 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form Email 1.3 | earliest → 1.3.68 | No fix stated |
Other CVEs of Contact Form Email
The 8 CVEs of Contact Form Email →
CVE-2026-32483
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Medium
CVE-2025-10019
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email contact-form-to-email…
6.5
Medium
CVE-2025-64369
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Medium
CVE-2025-24727
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact…
5.9
Medium