Description
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bestweblayout | Contact Form to DB by BestWebSoft | ≤ 1.7.6 | — |
High · 7.1
CVE-2026-39745
EUVD-2026-93254GHSA-3r82-vx58-5wrc
WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack