CVE-2025-3468 | NEX-Forms Plugin up to 8.9.1 on WordPress clean_html/form_fields cross site scripting

A vulnerability has been found in NEX-Forms Plugin up to 8.9.1 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument clean_html/form_fields leads to cross site scripting.

This vulnerability is known as CVE-2025-3468. The attack can be launched remotely. There is no exploit available.