A vulnerability has been found in Forminator Forms Plugin up to 1.50.2 on WordPress and classified as problematic. This impacts an unknown function. The manipulation of the argument form_name leads to cross site scripting.

This vulnerability is listed as CVE-2026-2002. The attack may be initiated remotely. There is no available exploit.