VulnSocial

CVE-2026-96227

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site's origin when it is opened (Stored XSS).

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-12: 110-12
Referenced assets1 URL
Full discourse1 post
  • UNDERCODE TESTING@UndercodeUpdate

    🚨 #CVE-2026-96227: Exploiting Unauthenticated Stored XSS in Piotnet Forms via File Upload Vectors + Video -Prediction: 📈 1 Positive | 📉 1 Negative https://undercodetesting.com/cve-2026-96227-exploiting-unauthenticated-stored-xss-in-piotnet-forms-via-file-upload-vectors-video/ Educational Purposes!

    0000026
    759 followersView on X

Explore more

Back to dashboard