Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:supsystic:contact_form:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Stored XSS in Contact Form by Supsystic

The Contact Form by Supsystic WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting due to insufficient sanitization of X-Forwarded-For headers.

Contact Form by Supsystic wordpress xss web-vulnerability
1r 2t 1c