Threats tagged 'ghsa-q93x-h976-c39h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2025-15028FormGent (WordPress plugin) · Cross-site Scripting High7.2EPSS 0.3%2026-08-06CVE Database V5CVE-2025-15028 The FormGent plugin for WordPress up to version 1.9.2 contains a stored cross-site scripting (XSS) vulnerability due to insufficient input sanitization and output escaping in form submission fields. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The issue is tracked as CVE-2025-15028 and has a high severity rating with a CVSS score of 7.2. EPSS 0.3%Vulnerability wpwax CWE-79 #ghsa-q93x-h976-c39h	CVE Database V5	2026-08-06

Page 1 of 1