Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-32517 2 Kleor, Wordpress 2 Contact Manager, Wordpress 2026-03-26 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kleor Contact Manager contact-manager allows Reflected XSS.This issue affects Contact Manager: from n/a through <= 9.1.
CVE-2025-68853 2 Kleor, Wordpress 2 Contact Manager, Wordpress 2026-02-24 8.8 High
Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1.