CVE-2026-57379

The FormyChat social-contact-form plugin is vulnerable to a stored cross-site scripting (XSS) attack due to improper input handling during web page generation. This vulnerability allows attackers to inject malicious scripts that can execute in the context of users' browsers, potentially compromising sensitive information or user sessions. Organizations using affected versions of FormyChat should prioritize patching this vulnerability to mitigate the risk of exploitation.