Skip to content
OpenAdvisories
High · 7.1 CVE-2025-30520 EUVD-2025-9124GHSA-5hc2-q9h7-36hr

WordPress Breezing Forms plugin <= 1.2.8.11 - Reflected Cross Site Scripting (XSS) vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in crosstec Breezing Forms breezing-forms allows Reflected XSS.This issue affects Breezing Forms: from n/a through <= 1.2.8.11.

Affected products

VendorProductAffectedFixed
crosstec Breezing Forms ≤ 1.2.8.11 —

References