A vulnerability classified as problematic has been found in HT Plugins HT Contact Form 7 Plugin up to 2.8.2 on WordPress. Affected is an unknown function. Performing a manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-42728. The attack is possible to be carried out remotely. No exploit exists.