CVE-2026-28560 | gVectors wpForo Forum up to 2.4.15 json_encode cross site scripting

A vulnerability identified as problematic has been detected in gVectors wpForo Forum up to 2.4.15. Impacted is the function json_encode. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-28560. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.