CVE-2025-26994

Summary

CVE-2025-26994 is a Cross-site Scripting (XSS) vulnerability affecting the softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite. The issue arises from improper neutralization of user input during web page generation. An attacker can exploit this vulnerability to inject and execute malicious scripts in a user's browser, potentially stealing sensitive data or taking control of the user's session. This vulnerability affects versions of the software from n/a through 7.4.2, making it essential for users to apply the necessary patches or updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.