CVE-2026-73378

HighCVSS 7.1

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Contact Form by Supsystic versions prior to 1.10.0.

An attacker can inject malicious script that executes in the user's browser, potentially leading to data theft or account takeover.

Update the Contact Form by Supsystic plugin to version 1.10.0 or later.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.