Description
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WP Chill | Kali Forms | ≤ 2.4.18 | — |
High · 7.1
CVE-2026-65446
EUVD-2026-49657GHSA-jf8x-943x-8x29
WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
Published Jul 27, 2026 · Updated Jul 28, 2026 · Assigned by Patchstack