Threats tagged 'ghsa-3cp8-88h9-2m3w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-121977The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Medium5.42026-11-07GCVE DatabaseCVE-2026-121977 The JetFormBuilder plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'note' form field parameter. This vulnerability affects all versions up to and including 3.6.8 and allows unauthenticated attackers to inject malicious scripts that execute when a privileged user views a crafted page. Exploitation requires a user with edit_others_posts capability to visit a manipulated URL controlled by the attacker. Report on CVE-2026-121977 Vulnerability CWE-79 #ghsa-3cp8-88h9-2m3w	GCVE Database	2026-11-07

Page 1 of 1