CVE-2026-81300

Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.

Credits

Aydan Arabadzha | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/calculation-for-contact-form-7/vulnerability/wordpress-calculation-for-contact-form-7-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve