CVE-2025-22761

UNKNOWN 0.0

WordPress Ajax Contact Form plugin <= 1.4.1 - Stored Cross Site Scripting (XSS) vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer Ajax Contact Form fws-ajax-contact-form allows Stored XSS.This issue affects Ajax Contact Form: from n/a through <= 1.4.1.

CWE	CWE-79
Vendor	olaf lederer
Product	ajax contact form
Published	Jan 15, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for olaf lederer ajax contact form

Be the first to know when new unknown vulnerabilities affecting olaf lederer ajax contact form are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Olaf Lederer / Ajax Contact Form

0 ≤ 1.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/fws-ajax-contact-form/vulnerability/wordpress-ajax-contact-form-plugin-ajax-contact-form-1-2-5-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve

Credits

l8BL | Patchstack Bug Bounty Program