Cpe:2.3:a:zero_spam_for_wordpress:zero_spam_for_wordpress:*:*:*:*:*:wordpress:*:*

An unauthenticated Stored Cross-Site Scripting vulnerability in Zero Spam for WordPress (CVE-2026-96752) allows attackers to inject malicious scripts into logs via nested POST array keys in Contact Form 7 submissions.