Contact Form by Supsystic vulnerabilities
We track 1 vulnerability in Contact Form by Supsystic products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Contact Form by Supsystic vulnerabilities
- 7.2 High severity
Contact Form by Supsystic: Improper Control of Generation of Code
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its forms and allows stored form-editor content to reach that engine as executable template code, enabling an administrator to perform server-side