Vulnerabilities

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This issue affects Contact Form Email: from n/a through 1.3.68.

Read at NIST National Vulnerability Database (CVE API 2.0)

CVSS

7.1

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-112379 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 3
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map…

   CVSS 6.5 CVE-2026-114703
2. 8
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicdark ND Shortcodes For Visual Composer…

   CVSS 6.5 CVE-2026-114702 PHP
3. 8
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Woocommerce ( Back in stock…

   CVSS 6.5 CVE-2026-114701
4. 3
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering…

   CVSS 6.5 CVE-2026-114700
5. 3
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus…

   CVSS 6.5 CVE-2026-112845
6. 10
   CVE NVD 10d ago

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows…

   CVSS 7.1 CVE-2026-111830