Quill Forms vulnerabilities
3 known CVE vulnerabilities in Quill Forms, translated and rated.
- CVE-2026-15664High
The Quill Forms plugin for WordPress in all versions up to and including 5.7.1 is vulnerable to Stored Cross-Site Scripting via the Multiple Choice 'Other' value. Insufficient input sanitization and output escaping allows unauthenticated attackers to inject arbitrary web scripts that execute in the WordPress admin results view.
- CVE-2026-28568High
Unauthenticated Cross Site Scripting (XSS) in Quill Forms versions up to 5.7.1.
- CVE-2026-75091High
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.