CVE-2026-32517

CVE-2026-32517 : A Reflected Cross-site Scripting (XSS) vulnerability exists in Kleor Contact Manager (contact-manager), caused by improper neutralization of input during web page generation. The issue affects Contact Manager versions up to 9.1. Successful exploitation could allow an attacker to ...

EUVD-2025-28805

Malicious code in bioql PyPI...

CVE-2025-8783

The Contact Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title’ parameter in all versions up to, and including, 8.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

WordPress Contact Manager plugin <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'title' vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Contact Manager versions = 8.6.5...