Description
Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.
Medium · 6.1
CVE-2025-26841
EUVD-2025-14307GHSA-g988-pqhg-r7m5
Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.
Published May 12, 2025 · Updated May 12, 2025 · Assigned by mitre