Skip to content
OpenAdvisories
High · 7.1 CVE-2025-24545 EUVD-2025-3756GHSA-9f3p-pqg6-mchm

WordPress BSK Forms Validation plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Published Feb 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: bannersky Product: BSK Forms Validation

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Validation bsk-gravity-forms-custom-validation allows Reflected XSS.This issue affects BSK Forms Validation: from n/a through <= 1.7.

Affected products

VendorProductAffectedFixed
bannersky BSK Forms Validation ≤ 1.7 —

References