Skip to content
OpenAdvisories
High · 7.1 CVE-2026-119504 EUVD-2026-119914GHSA-729f-5mcr-hfr7

WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1.

Affected products

VendorProductAffectedFixed
DynamiApps Frontend Admin by DynamiApps ≤ 3.30.1 —

References