Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-32147 EUVD-2024-29968GHSA-v6x9-589r-m39r

WordPress Contact Form Plugin plugin <= 1.1.23 - Cross Site Scripting (XSS) vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Form Plugin Team - GhozyLab Product: Easy Contact Form Lite

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Form Plugin Team - GhozyLab Easy Contact Form Lite allows Stored XSS.This issue affects Easy Contact Form Lite : from n/a through 1.1.23.

Affected products

VendorProductAffectedFixed
Form Plugin Team - GhozyLab Easy Contact Form Lite ≤ 1.1.23 —

References