CVE-2025-26841

Publication date

2025-05-12 00:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.