TI-2026-00780 CVE-2026-1045 · GHSA-f49w-r2gf-jprxCross-site scripting in nhomcaodem Viet contactPriority LOW 20The Viet contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.00224 · Published 2026-01-20 · No fix listed CWE-79