Read the docs

Form2Email

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Form2Email records in CISA KEV

No Form2Email vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

Contact Form to Email 1.3.24 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating forms with script tags in the form name field.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00187 Published 2026-05-10 No fix listed CWE-79
Open these records in search →