Approved changes feed: RSS · Atom

cpe:2.3:a:form2email:contact_form_to_email:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorForm2Email (26681905-cd7e-5ac6-950a-90c7a88d9f88)
ProductContact Form To Email (39233f64-2974-58f5-8312-38f4ee84ee91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47926 vulnerable 2026-06-08 05:38:07.918677 WordPress Contact Form to Email 1.3.24 Stored XSS
MEDIUM (6.4)
Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script tags in the form name field. Attackers can craft form names containing JavaScript code that executes when other logged-in users access the form management page, enabling session hijacking or credential theft.
Published: 2026-05-10T12:43:48.243Z
Updated: 2026-05-24T01:37:07.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.