high
advisory
Live Summary for Gravity Forms: Reflected Cross-site Scripting (CVE-2026-110884)
The Live Summary for Gravity Forms plugin for WordPress is affected by a Reflected Cross-site Scripting (XSS) vulnerability.
CVE search metadata
CVE search record: CVE-2026-110884. Severity: high. CVSS: 7.1. KEV: no. Product: Live Summary for Gravity Forms (n/a through 1.2.10). Brief: Live Summary for Gravity Forms: Reflected Cross-site Scripting (CVE-2026-110884). Brief link: https://feed.craftedsignal.io/briefs/2026-10-live-summary-xss/
Triage facts
Revision 1- Applicability
- Live Summary for Gravity Forms (n/a through 1.2.10)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 21, 11:19 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
The "Live Summary for Gravity Forms" plugin is affected by an Improper Neutralization of Input During Web Page Generation vulnerability, resulting in Reflected XSS. This vulnerability affects versions from n/a through 1.2.10.