CVE-2020-36919

Publication date

2026-01-13 22:55:56

Family

VulnCheck

State

PUBLISHED

Description

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victims browser.