CVE-2026-57708

HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5.2.

StatusDeferred

설명

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5.2.

Score Summary

CVSS Score: 7.1
Version: 3.1
VPI: 71
Why this VPI (explainable, experimental)
VPI breakdown
Impact 71.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 71.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 7.70%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Changed
Low Confidentiality Impact
Low Integrity Impact
Low Availability Impact

Details

Published: 07/13/2026(8 days ago)
Modified: 07/13/2026(7 days ago)
Source: NVD

CWE Weakness Classification

CWE-79
NVD
Secondary

References (1)

NVD
https://patchstack.com/database/Wordpress/Plugin/contact-form-entries/vulnerability/wordpress-contact-form-entries-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	71.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	71.00