medium5.9

CVE-2025-58665

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tmontg1 Form Generator for WordPress form-generator-power…

Impact

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tmontg1 Form Generator for WordPress form-generator-powered-by-jotform allows Stored XSS.This issue affects Form Generator for WordPress: from n/a through <= 1.52.

Affected products

Product	Affected versions
Form Generator For WordPress: From N/A Through	through 1.52.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/form-generator-powered-by-jotform/vulnerability/wordpress-form-generator-for-wordpress-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve