TI-2024-25037 CVE-2024-37537 · GHSA-vm9f-j47q-jhg5WordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 26Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in UusWeb.Ee WS Contact Form allows Stored XSS.This issue affects WS Contact Form: from n/a through 1.3.7.CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00274 · Published 2024-07-21 · No fix listed CWE-79