CVE-2026-97645

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.1.2 . The root cause is insufficient input sanitization and output escaping within the List Field component. This allows unauthenticated attackers to inject arbitrary we...