CVE-2025-26841

Impact

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://everestforms.net
• https://gist.github.com/knilkantha/71458e9a787157653d5603fe6880bc05