Threats tagged 'ghsa-883r-xqxq-wq5r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-91152The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is Medium6.1EPSS 0.3%2026-10-29GCVE DatabaseCVE-2026-91152 The Everest Forms WordPress plugin up to version 3.6.2 contains a reflected cross-site scripting (XSS) vulnerability via the 'evf_toast_type' parameter. This flaw allows unauthenticated attackers to inject arbitrary scripts that execute in a user's browser if the user is tricked into clicking a crafted link. Exploitation depends on the 'evf_toast' parameter decoding successfully via atob(), which is attacker-controlled. EPSS 0.3%Report on CVE-2026-91152 Vulnerability CWE-79 #ghsa-883r-xqxq-wq5r	GCVE Database	2026-10-29

Page 1 of 1