Contact Form by Supsystic vulnerabilities

3 known vulnerabilities in Contact Form by Supsystic from Supsystic. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Contact Form by Supsystic: Insertion of Sensitive Information Into Sent Data

  CVE-2026-115591Oct 28, 2026Supsystic

  Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by Supsystic: from n/a through 1.10.5.

• 7.1 High severity

  Contact Form by Supsystic: Improper Neutralization of Input During Web Page Generation

  CVE-2025-52753Oct 22, 2025Supsystic

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Reflected XSS.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.36.

• 9.1 Critical severity

  Contact Form by Supsystic: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

  CVE-2024-48042Oct 16, 2024SupsysticEPSS 1.15%

  Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.28.