A vulnerability, which was classified as problematic, was found in themehunk Lead Form Builder & Contact Form Plugin up to 2.0.1 on WordPress. Impacted is the function
lfb_lead_sanitize. Such manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2026-1454. The attack can be executed remotely. There is not any exploit available.
