CERT24CVE-2026-97645 — Gravity FormsLoading data…
CERT24Threat Observatory
Period

CVE-2026-97645 — Gravity Forms

The Gravity Forms plugin for WordPress is vulnerable to stored cross-site scripting (Stored XSS) via the List Field in all versions up to and including 3.1.2. The cause is insufficient input sanitization and output escaping.

← Back to intelligence

CVE-2026-97645 — Gravity Forms

The Gravity Forms plugin for WordPress is vulnerable to stored cross-site scripting (Stored XSS) via the List Field in all versions up to and including 3.1.2. The cause is insufficient input sanitization and output escaping.