Skip to content
Sign in
7.1 High

CVE-2026-32532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder lead-form-builder allows Stored XSS.This issue affects Contact Form & Lead Form Elementor Builder: from n/a through <= 2.0.1.

Affected products and versions

Product Affected versions Fixed in
Contact Form & Lead Form Elementor Builder Versions not published

Other CVEs of Contact Form & Lead Form Elementor Builder

The 3 CVEs of Contact Form & Lead Form Elementor Builder →
CVE-2023-25969 Missing Authorization vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder allows Exploiting… 5.4 Medium CVE-2025-68046 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk Contact Form &… 6.5 Medium
Track this CVE