CVE-2026-28568

Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.

Credits

daroo | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-5-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve