high7.1
CVE-2026-49055
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.
Impact
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.
Affected products
| Product | Affected versions |
|---|---|
| Drag And Drop Multiple File Upload – Contact Form 7 | through 1.3.9.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.