TI-2025-12771 CVE-2025-13975 · GHSA-6whv-v699-3vp6
Cross-site scripting in izuchy Contact Form 7 with ChatWork
Priority LOW 20
The Contact Form 7 with ChatWork plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_token' and 'roomid' settings in all versions up to, and including, 1.1.0 due to insufficient input sanitizat…