Threats tagged 'ghsa-fcm8-mg9w-8fjh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-106649The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.29 does not prevent users with High2026-11-04GCVE DatabaseCVE-2026-106649 The Kali Forms WordPress plugin before version 2.4.29 allows users with author-level access and above to inject arbitrary JavaScript into form button configurations. This JavaScript executes in the browser session of any user who clicks the button, including administrators, potentially leading to cross-site scripting (XSS) attacks. Report on CVE-2026-106649 Vulnerability #ghsa-fcm8-mg9w-8fjh	GCVE Database	2026-11-04

Page 1 of 1