CVE-2025-26841

Description

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

Affected Platforms

Weakness Type

CWE-79

References

• https://everestforms.net
• https://gist.github.com/knilkantha/71458e9a787157653d5603fe6880bc05