CVE-2025-14803

creationtimestamp| type| source ---|---|--- 2026-01-09 09:11:25+00:00| seen| https://gist.github.com/Darkcrai86/949f83b815952882a22bad4307f82711...

CVE-2025-14803

The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting...