cleantalk
Vulnerabilities and Security Researches

Forminator – Contact Form, Payment Form & Custom Form Builder, CVE-2026-56071

CVE, Research URL

CVE-2026-56071

Published on
Jun 25, 2026
Research Description
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.
Affected versions
max 1.53.2.
Status
vulnerable