CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

The WPEVEREST Everest Forms WordPress plugin is vulnerable to a Cross-Site Scripting (XSS) flaw in versions prior to 3.0.9 . This vulnerability allows an attacker to achieve arbitrary code execution via the file upload feature. To resolve this issue, users are recommended to update to version 3.0...