CVE-2016-1222: Kobe-Beauty PHP-Contact-Form

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

Affected products

• Kobe-Beauty PHP-Contact-Form: before 2016-05-18 (fixed in 2016-05-18)

Published 2016-06-05. Last modified 2026-06-17.