PT-2026-32588

The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field Text Box input type in form submissions in all versions up to, and including, 1.15.40. This is due to insufficient input sanitization sanitize text field strips tags but not quotes and...

CVE-2025-28233

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12513 2025-04-18 19:39:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk5gt4lk2 2025-04-18...