CF
Product
Contact Form by Supsystic
by · last CVE Oct 29, 2026
6
CVEs
0
On KEV
7.2
Max CVSS
6
New 30D
Severity mix
Critical 0High 1Medium 3Low 2
Watch

Add Contact Form by Supsystic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-115303
New
3.7–Oct 29
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
Affected: before 1.11.1
CVE-2025-15705
New
3.5
0%
Oct 25
Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS
Affected: before 1.8.0
Showing 2