CVE-2026-116753

The Multi Step for Contact Form 7 plugin for WordPress (versions up to and including 2.9.1 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'multipart field name (array key)' parameter. An unaut...