CVE-2026-122231

The WS Form LITE WordPress plugin (versions up to and including 1.12.18 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the 'field_[0][0]' parameter due to insufficient input sanitization and output escaping. Specifically, the client-side esc_html() helper returns non-st...