cleantalk
Vulnerabilities and Security Researches

Contact Form Email, CVE-2025-24727

CVE, Research URL

CVE-2025-24727

Application

Contact Form Email

Published on
Jan 24, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Contact Form Email allows Stored XSS. This issue affects Contact Form Email: from n/a through 1.3.52.
Affected versions
max 1.3.53.
Status
vulnerable