← All advisories

High severity7.1NVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

CVE-2026-57312

CVE-2026-57312

Description

Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.

Affected products

2

WordPress/Everest Formsllm-fuzzy2 versions
<=3.4.8+ 1 more
- (no CPE)range: <=3.4.8
- (no CPE)range: <=3.4.8
Package: https://wordpress.org/plugins/everest-forms

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/everest-forms/vulnerability/wordpress-everest-forms-plugin-3-4-8-reflected-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.