
CVE-2025-14855-POC
SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
exploitationpayload-developmentpenetration-testing+3
2

SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting

This vulnerability displays an XSS flaw in a WordPress popup plugin, allowing attackers to inject malicious JavaScript through a stored XSS