What is CVE-2026-28143?
CVE-2026-28143 is an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting Forminator versions <= 1.56.0. It allows unauthenticated attackers to execute malicious scripts. Updating to the latest version is recommended.
Azərbaycanca: CVE-2026-28143, Forminator plaginin 1.56.0 və daha əvvəlki versiyalarında autentifikasiya olmadan işləyən Cross Site Scripting (XSS) zəifliyidir. Bu zəiflik təsdiqlənməmiş hücumçulara zərərli skriptləri icra etməyə imkan verir. Plaginin ən son versiyasına yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which plugin and versions are affected by CVE-2026-28143?
The vulnerability affects Forminator versions 1.56.0 and earlier.
Is authentication required to exploit CVE-2026-28143?
No, it is an unauthenticated XSS vulnerability, meaning no authentication is required.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.