Threats tagged 'ghsa-g6gj-mgx4-gxhr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-96767The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting High7.22026-10-29GCVE DatabaseCVE-2026-96767 The NEX-Forms – Ultimate Forms Plugin for WordPress is vulnerable to a stored cross-site scripting (XSS) flaw via the 'type' parameter in all versions up to and including 9.3.2. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. Report on CVE-2026-96767 Vulnerability CWE-79 #ghsa-g6gj-mgx4-gxhr	GCVE Database	2026-10-29

Page 1 of 1