Contact Form by Supsystic
- Software type
- Other
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/26/2026, Contact Form by Supsystic recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Contact Form by Supsystic and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-83625Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address HeaderCVE-2026-4257Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill FunctionalityCVE-2024-13452Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX ActionCVE-2023-2528Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-83625Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header | Exploitation statusNot exploited | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-4257Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality | Exploitation statusNot exploited | FixYes | Published03/30/2026 | SeverityCritical |
CVE-2024-13452Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action | Exploitation statusNot exploited | FixYes | Published04/16/2025 | SeverityMedium |
CVE-2023-2528Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action | Exploitation statusNot exploited | FixYes | Published05/16/2023 | SeverityMedium |
4 Results | Page 1 of 1