CVE-2026-65446 Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.

Affected products and versions

Product	Affected versions	Fixed in
Kali Forms 2.4	earliest → 2.4.18	No fix stated

Other CVEs of Kali Forms

The 5 CVEs of Kali Forms →

CVE-2026-81276 Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions 5.3 Medium CVE-2026-59542 Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions 7.7 High CVE-2023-46083 Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2023-45275 Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access… 6.5 Medium