CVE-2026-119483: WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The vector indicates network access, low attack complexity, and no privileges are required. User interaction is required for exploitation.

Q: Which installations are affected?

Form Maker by 10Web versions through 1.15.50 are affected. The provided data does not identify a fixed version.

Q: What is the potential impact of a successful exploit?

The vulnerability is a stored XSS issue. The supplied vector rates confidentiality, integrity, and availability impact as low, with scope changed.

Published Nov 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50.

Affected Software

1 affected component

10web Form Maker by 10Web<=1.15.50

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Form Maker by 10Web to a version that resolves this vulnerability.
Fixed in 1.15.51

Event History

Nov 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vector indicates network access, low attack complexity, and no privileges are required. User interaction is required for exploitation.

Which installations are affected?

Form Maker by 10Web versions through 1.15.50 are affected. The provided data does not identify a fixed version.

What is the potential impact of a successful exploit?

The vulnerability is a stored XSS issue. The supplied vector rates confidentiality, integrity, and availability impact as low, with scope changed.

CVE-2026-119483: WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations are affected?

What is the potential impact of a successful exploit?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations are affected?

What is the potential impact of a successful exploit?