CVE-2026-116858 — Vulnerability intelligence

—

Published: 2026-11-03T17:17:57.740

CVSS

4.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator forminator allows Code Injection.This issue affects Forminator: from n/a through 1.58.3.

Sources

• CVE-2026-116858
• Original advisory