SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-57668

HIGH · CVSS 7.1 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The NEX-Forms Express WP Form Builder is vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability can allow attackers to inject malicious scripts that may compromise user data or session integrity. Organizations using NEX-Forms versions up to 9.2.2 should prioritize remediation to mitigate potential exploitation risks.

CVE
CVE-2026-57668
Severity
HIGH
CVSS
7.1
EPSS
0.18%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.2.2.