1 matches found
CVE-2026-15284: Improper Neutralization of Input During Web Page Generation
The King Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formpageid' parameter in versions up to, and including, 51.1.62 This is due to insufficient input sanitization in the addtosubmissions function, which applies sanitizetextfield which preserves...
6.4CVSS6AI score0.00419EPSS
SaveExploits0References2
20