CVE-2026-116858

MEDIUM NVD

CVSS Score 4.3

Severity MEDIUM

Published Nov 03, 2026

Vendor unknown

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator forminator allows Code Injection.This issue affects Forminator: from n/a through 1.58.3.

References

https://patchstack.com/database/wordpress/plugin/forminator/vulnerability/wordpress-forminator-plugin-1-58-3-content-injection-vulnerability?_s_id=cve