Read the docs

GhozyLab

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

GhozyLab records in CISA KEV

No GhozyLab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form 2 records MEDIUM Gallery - Photo Albums - Portfolio 1 record LOW Gallery For Social Photo 1 record LOW Image Slider 1 record LOW Popup Builder 1 record MEDIUM

Records

2 records in Contact Form · all components

TI-2025-05169 CVE-2025-5730 · GHSA-xxhw-v6w9-gq64

Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS

Priority MEDIUM 53

The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 4.3 Network High privileges User interaction EPSS 0.00242 Published 2025-06-30 Fixed in 1.1.29 CWE-79
TI-2024-21222 CVE-2024-32147 · GHSA-v6x9-589r-m39r

WordPress Contact Form Plugin plugin <= 1.1.23 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Form Plugin Team - GhozyLab Easy Contact Form Lite allows Stored XSS.This issue affects Easy Contact Form Lite : from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-04-15 No fix listed CWE-79
Open these records in search →