CVE-2026-116753 | NinjaTeam Multi Step for Contact Form 7 Plugin up to 2.9.1 on WordPress multipart field name cross site scripting

A vulnerability identified as problematic has been detected in NinjaTeam Multi Step for Contact Form 7 Plugin up to 2.9.1 on WordPress. Impacted is an unknown function. The manipulation of the argument multipart field name leads to cross site scripting.

This vulnerability is listed as CVE-2026-116753. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More