A vulnerability categorized as problematic has been discovered in gVectors wpForo Forum up to 2.4.15. This issue affects some unknown processing of the component SVG File Parser. Executing a manipulation can lead to cross site scripting.
This vulnerability is handled as CVE-2026-28558. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
