TI-2025-30123 CVE-2025-47626 · GHSA-5xrr-4hfr-g6whWordPress Submission DOM tracking for Contact Form 7 plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affect…CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00282 · Published 2025-05-07 · No fix listed CWE-79