{"id":"CVE-2026-96227","published":"2026-10-11T07:17:29.543","lastModified":"2026-10-13T16:29:21.907","description":"The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site's origin when it is opened (Stored XSS).","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/90756840-b277-41bd-8104-16f839db5189/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Piotnet Forms WordPress plugin allows unauthenticated attackers to upload files that execute arbitrary JavaScript when opened, leading to Stored Cross-Site Scripting (XSS) attacks. This vulnerability is particularly dangerous because it enables attackers to inject malicious code that can hijack user sessions or redirect them to malicious sites.","exploitability":"Exploitation is relatively straightforward as attackers only need to upload a malicious file through the form submission endpoint without authentication, with no additional preconditions required.","blast_radius":"The impact could be significant across all WordPress sites using the affected plugin version, potentially compromising user sessions and enabling further attacks through persistent XSS payloads stored on the server.","remediation":"Upgrade to version 1.0.31 or later which includes authentication and validation for form-submission file uploads.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","wordpress","file-upload","stored-xss"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:55:21.837Z"}}