← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

CVE-2026-57312

Description

Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.

Affected products

2

WordPress/Everest Formsinferred2 versions
<=3.4.8+ 1 more
- (no CPE)range: <=3.4.8
- (no CPE)range: <=3.4.8
Package: https://wordpress.org/plugins/everest-forms

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/everest-forms/vulnerability/wordpress-everest-forms-plugin-3-4-8-reflected-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.