A vulnerability, which was classified as problematic, has been found in Gravity Forms Plugin up to 2.10.0 on WordPress. This impacts the function
wp_kses of the component Entries List Page. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2026-5113. It is possible to initiate the attack remotely. There is no exploit available.
