Contact Form vulnerabilities

2 known vulnerabilities in Contact Form from Supsystic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Contact Form by Supsystic: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

  CVE-2024-48042Oct 16, 2024SupsysticEPSS 1.15%

  Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.28.

• 8.8 High severity

  Contact Form by Supsystic: Cross-Site Request Forgery

  CVE-2023-2528May 17, 2023Supsysticcom

  The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated