CVE-2007-3352

no score yetEPSS 1.3%

Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
Published: 2007-06-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

stephen_ostermiller:contact_form

References

http://bugzilla.ostermiller.com/show_bug.cgi?id=151
http://ostermiller.org/contactform/
http://osvdb.org/36372
http://secunia.com/advisories/25812
http://www.attrition.org/pipermail/vim/2007-June/001669.html

Check your stack JSON