CVE-2026-28568

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Quill Forms versions up to 5.7.1.

An attacker can inject malicious JavaScript, potentially leading to session hijacking or content manipulation.

Update Quill Forms to the latest patched version.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.