Reflected XSS Vulnerability in Advanced Angular Contact Form by Tauhidul Alam

CVE-2025-23658

What is CVE-2025-23658?

The Advanced Angular Contact Form plugin developed by Tauhidul Alam is susceptible to a reflected cross-site scripting (XSS) vulnerability. This issue arises from the improper handling of user input during the web page generation process, allowing attackers to execute arbitrary JavaScript code in the context of a user's browser session. Affected versions range from unversioned up to 1.1.0, which may allow malicious actors to potentially hijack sessions, deface websites, or redirect users to malicious sites. It is crucial for users of this plugin to implement immediate updates and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References