CVE-2025-24726

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through = 1.2.1...

CVE-2025-24726

creationtimestamp| type| source ---|---|--- 2025-01-24 20:16:11+00:00| seen| https://t.me/cvedetector/16333 2025-01-24 22:47:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113885762817071899...

CVE-2025-24726

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through = 1.2.1...

CVE-2025-24726

CVE-2025-24726 is a Stored XSS in HT Conctact Form 7 (WordPress plugin) impacting versions up to 1.2.1. The issue arises from improper input neutralization during web page generation, enabling stored script injection. Multiple sources (NVD/Red Hat/Wordfence) confirm the vulnerability and classify...