🚨 CVE-2026-39449
Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions.