CVE-2025-26841 Information

Description

Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

Reference

https://everestforms.net https://gist.github.com/knilkantha/71458e9a787157653d5603fe6880bc05