Security Advisory

CVE-2020-36919

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-13 22:55:56

Last updated 2026-05-24 01:36:51

Assigner VulnCheck

CVSS score 5.1

State PUBLISHED

Description

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.

← Browse all CVEs View on cve.org ↗