CVE-2020-36919

6.1MEDIUM

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute

Publicado: 1/13/2026Actualizado: 1/14/2026
Ver en NVDVer en MITRE

Descripción

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.

Análisis IAImpulsado por IA

Referencias