CVE-2017-18490: Bestwebsoft Contact Form Multi

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.

Affected products

• Bestwebsoft Contact Form Multi: before 1.2.1 (fixed in 1.2.1)

Published 2019-08-13. Last modified 2026-06-17.