Advisories · Technology

supsysticcom Contact Form by Supsystic.

Every CVE that names supsysticcom Contact Form by Supsystic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-83625 CVE record

CVSS 7.2 High

Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header
- supsysticcom Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 5 Sept 2026
CVE-2026-4257 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality
- supsysticcom Contact Form by Supsystic
- Code injection
Not analysed yet 30 Mar 2026
CVE-2024-13452 CVE record

CVSS 6.1 Medium

Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
- supsysticcom Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2025
CVE-2023-2528 CVE record

CVSS 5.4 Medium

Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
- supsysticcom Contact Form by Supsystic
- Cross-site request forgery (CSRF)
Not analysed yet 16 May 2023