CVE-2025-23655

Summary

CVE-2025-23655 is a Cross-Site Scripting (XSS) vulnerability affecting the Contact Form 7 – Paystack Add-on. The flaw, located in the plugin's input handling during web page generation, can be exploited to inject malicious scripts into the pages viewed by other users. This issue poses a risk of data theft or unauthorized account actions. The vulnerability affects versions of the Contact Form 7 – Paystack Add-on from n/a through 1.2.3. Users are advised to update to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.