CVE-2026-119504

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.30.2

Description Insufficient input sanitization and output escaping in the acf-frontend-form-element allow for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which then execute when a user accesses the affected page.

Recommendations Update to a version newer than 3.30.1.