CVE-2026-57423

The Kofi Mokome Message Filter for Contact Form 7 is vulnerable to a reflected cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability can allow attackers to inject malicious scripts, potentially compromising user data and session integrity. Organizations using versions up to 1.6.3.8 of this plugin should prioritize patching this issue to mitigate the risk of exploitation.