CVE-2026-90437

The Gravity Forms plugin for WordPress (all versions up to and including 3.1.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping in Post Excerpt , Post Custom Field , and Rich-Text-Editor-enabled Paragraph Text fields. Spe...