CVE-2026-66633

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Unauthenticated XSS vulnerability in Fluent Forms Pro Add On Pack versions prior to 6.2.12. An attacker can inject malicious scripts that execute in the victim's browser.

Risk Assessment

Risk of data theft, session hijacking, or unauthorized actions in the context of a logged-in user.

Recommendation

Update Fluent Forms Pro Add On Pack to version 6.2.12 or later.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.