SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-57411

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

A DOM-based Cross-site Scripting (XSS) vulnerability exists in the CF7 Views – Complete Entry Management for Contact Form 7 plugin, affecting versions up to 3.2.2. This flaw allows attackers to inject malicious scripts into web pages, potentially compromising user data and session integrity. Organizations using this plugin should prioritize remediation to protect against potential exploitation and data breaches.

CVE
CVE-2026-57411
Severity
HIGH
CVSS
7.1
EPSS
0.18%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views &#8211; Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views &#8211; Complete Entry Management for Contact Form 7: from n/a through <= 3.2.2.