SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57708

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

A reflected cross-site scripting vulnerability exists in the Contact Form Entries component of CRM Perks, affecting versions up to and including 1.5.2. This flaw allows attackers to inject malicious scripts into web pages, potentially compromising user data and session integrity. Organizations using the affected versions should prioritize remediation to protect against potential exploitation and data breaches.

CVE
CVE-2026-57708
Severity
HIGH
CVSS
7.1
EPSS
0.18%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through <= 1.5.2.