CVE-2025-52753

Name of the Vulnerable Software and Affected Versions supsystic Contact Form versions through 1.7.35

Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-site Scripting (XSS). This allows attackers to inject malicious scripts into web pages viewed by other users. The vulnerable component is susceptible to exploitation when processing user input during web page generation.

Recommendations Update supsystic Contact Form to a version greater than 1.7.35.