PT-2025-43240 · Supsystic · Contact Form By Supsystic

63N0 · Published 2025-10-22 · Updated 2025-11-18 · CVE-2025-52753

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions supsystic Contact Form versions through 1.7.35

Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-site Scripting (XSS). This allows attackers to inject malicious scripts into web pages viewed by other users. The vulnerable component is susceptible to exploitation when processing user input during web page generation.

Recommendations Update supsystic Contact Form to a version greater than 1.7.35.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-52753

Affected Products

Contact Form By Supsystic

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-52753 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1990786295572951203 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vulnerability · Note