CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload...

CVE-2025-26841

The WPEVEREST Everest Forms WordPress plugin (versions prior to 3.0.9 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. This vulnerability exists within the file upload feature and can be exploited by an attacker to execute arbitrary code . To mitigate this risk, users are recommended to upda...