CVE-2026-2365 | Fluent Forms Pro Plugin up to 6.1.17 on WordPress Draft Form Submission Endpoint fluentform_step_form_save_data cross site scripting

A vulnerability identified as problematic has been detected in Fluent Forms Pro Plugin up to 6.1.17 on WordPress. This affects the function fluentform_step_form_save_data of the component Draft Form Submission Endpoint. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-2365. Remote exploitation of the attack is possible. No exploit is available.