CVE-2026-93747 | tomdever wpForo Forum Plugin up to 3.1.6 on WordPress Telegram Profile Field update_custom_fields data cross site scripting

A vulnerability classified as problematic was found in tomdever wpForo Forum Plugin up to 3.1.6 on WordPress. This issue affects the function update_custom_fields of the component Telegram Profile Field. Executing a manipulation of the argument data can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-93747. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More