contact form email vulnerabilities and fixes
Recent CVEs affecting contact form email, with upgrade or downgrade steps. 2 tracked.
Also searched as: contactformemail.
contact form email has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-01-24. Highest priority: CVE-2024-31302 (score 34/100).
- CVE-2025-24727 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeop
- CVE-2024-31302 MEDIUM 5.3 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This
FAQ
How do I fix contact form email vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is contact form email being exploited right now?
None of the tracked contact form email CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which contact form email CVE should I patch first?
CVE-2024-31302 currently ranks highest (34/100): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This.