CVE-2026-8172

The Simple Basic Contact Form WordPress plugin (versions through 20250114 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to escape user-supplied input before reflecting it into the contact form output during validation errors. Unauthenticate...