Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-13359

1 brief RSS
high advisory

Stored XSS in BestWebSoft Contact Form to DB Plugin

The Contact Form to DB WordPress plugin (<= 1.7.5) is vulnerable to unauthenticated Stored Cross-Site Scripting via the cntctfrm_contact_dropdown parameter, allowing attackers to execute scripts in an administrator's browser session.

Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress web-application xss wordpress cve-2026-13359
1r 1t 1c