CVE-2026-28143

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Forminator versions 1.56.0 and earlier, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or other malicious actions executed in the context of the affected user. Organizations using vulnerable versions of Forminator should prioritize patching to mitigate potential exploitation risks.