CVE-2026-66643

Wufoo Shortcode versions up to 1.55 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a risk of data theft and session hijacking, making it essential for web developers and administrators using affected versions to prioritize remediation efforts. Organizations leveraging Wufoo Shortcode should assess their exposure and implement necessary patches or mitigations to safeguard against potential exploitation.