A vulnerability described as problematic has been identified in HTML Forms Plugin up to 1.6.0 on WordPress. This affects an unknown function of the component File Upload. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2025-13861. The attack may be launched remotely. There is no exploit available.
