Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 11/04/2025 Updated: 23/04/2025

Reflected XSS Vulnerability in Everest Forms WordPress Plugin Before 3.1.1

The Everest Forms WordPress plugin has a Cross-Site Scripting (XSS) vulnerability in all versions up to and including 3.1.1. The issue exists in the 'form_id' parameter because of weak input sanitization and output escaping. This allows unauthenticated attackers to inject malicious web scripts into pages. These scripts can execute if a user is tricked into clicking a specially crafted link, potentially compromising their browsing session or website interactions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wpeverest everest forms – contact form, quiz, survey, newsletter & payment form builder for wordpress
wpeverest everest forms

CWE-79 https://nvd.nist.gov https://www.first.org/epss https://plugins.trac.wordpress.org/changeset/3268742/https://www.wordfence.com/threat-intel/vulnerabilities/id/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1?source=cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-3421

Vulnerability Summary

References

Vulmon Search

About

Products

Connect