CVE-2026-66638

Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-10-cross-site-scripting-xss-vulnerability?_s_id=cve