CVE-2026-8172

The CVE concerns the WordPress plugin Simple Basic Contact Form (affected through version 20250114). The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by failure to escape user-supplied input before reflecting it in output during validation errors. Exploitation is possible b...