A vulnerability was found in SpiceForms Form Builder Plugin up to 1.0 on WordPress. It has been declared as problematic. This affects an unknown part of the component Shortcode Handler. Executing a manipulation can lead to cross site scripting.
This vulnerability appears as CVE-2025-12178. The attack may be performed from remote. There is no available exploit.
