FormGent
FormGent builds WordPress forms with multi-step layouts, quizzes, and payment collection features.
FormGent (next-gen-ai-form-builder-for-wordpress-with-multi-step-quizzes-payments-more) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 06, 2026; the highest published CVSS base score is 7.2.
next-gen-ai-form-builder-for-wordpress-with-multi-step-quizzes-payments-moreCVE-2025-15028: FormGent permits unauthenticated stored cross-site scripting through submissions
An unauthenticated form submitter can persist attacker-controlled script through form submission fields in FormGent 1.9.2 and earlier because stored answer values and response output are insufficiently sanitized and escaped. The script runs when the affected response or page is rendered. The public submission endpoint or action, exact field, storage location and output function are not disclosed. Version 1.10.0 adds sanitization for stored answers and response output.
| Safe version |
|
||
|---|---|---|---|
| Aug 06, 2026 |
CVE-2025-15028
FormGent permits unauthenticated stored cross-site scripting through submissions
An unauthenticated form submitter can persist attacker-controlled script through form submission fields in FormGent 1.9.2 and earlier because stored answer values and response output are insufficiently sanitized and escaped. The script runs when the affected response or page is rendered. The public submission endpoint or action, exact field, storage location and output function are not disclosed. Version 1.10.0 adds sanitization for stored answers and response output.
|
1.10.0 |
CVE7.2
|