A vulnerability classified as problematic was found in Viet Contact Plugin up to 1.3.2 on WordPress. Impacted is an unknown function of the component Setting Handler. Such manipulation of the argument ll1/ll2/ll3/ll4 leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-1045. The attack can be launched remotely. No exploit exists.