CVE-2025-9562 | themeisle Redirection for Contact Form 7 Plugin up to 3.2.6 on WordPress Shortcode qs_date cross site scripting

October 18, 2025 Yanac

A vulnerability categorized as problematic has been discovered in themeisle Redirection for Contact Form 7 Plugin up to 3.2.6 on WordPress. This vulnerability affects the function qs_date of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2025-9562. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More