7.1
Élevée
CVE-2026-112379 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Contact Form Email 1.3 | premières → 1.3.68 | Pas de correctif indiqué |
Autres CVE de Contact Form Email
Les 8 CVE de Contact Form Email →
CVE-2026-32483
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Moyenne
CVE-2025-10019
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email contact-form-to-email…
6.5
Moyenne
CVE-2025-64369
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly…
6.5
Moyenne
CVE-2025-24727
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact…
5.9
Moyenne