CVE-2026-75091

creationtimestamp| type| source ---|---|--- 2026-08-18 06:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4dtenj2r3pepg 2026-08-18 07:00:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtdnf72ajw2i...

CVE-2026-75091

The Quill Forms WordPress plugin (versions ≤ 5.7.1) has a stored XSS flaw from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts that execute when users view affected pages. CVSS 7.2 HIGH; no confirmed in-the-wild exploitation reported. Patc...