VYPR

Contact Form 7 – Post Fields

by Markus Wiesenhofer

CVEs (1)

  • CVE-2026-121768MedNov 7, 2026
    risk 0.42cvss 6.5epss —

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Wiesenhofer Contact Form 7 – Post Fields cf7-post-fields allows Stored XSS.This issue affects Contact Form 7 – Post Fields: from n/a through 2.6.0.