CVE-2025-26962 WordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Easy Contact Form Lite contact-form-lite allows Stored XSS.This issue affects Easy Contact Form Lite : from n/a through = 1.1.25...

CVE-2025-26962

CVE-2025-26962 is an active stored cross-site scripting (XSS) vulnerability in GhozyLab Easy Contact Form Lite (a WordPress plugin). According to the documents, it affects Easy Contact Form Lite versions from n/a up to 1.1.25, with the issue stemming from improper input neutralization during web ...