May 8, 2026
Breakdance 2.7.2 is now available. This release fixes a security issue in Form Submissions and a popup shortcode regression.
This update fixes a stored XSS issue in the Form Submissions action Details panel in WordPress Admin. Some action context data in a stored submission was shown without escaping. In specific cases, HTML or JavaScript stored in that action log could run when an authorized WordPress user opened the submission’s action Details panel.
The update escapes action context keys and nested action context values before rendering them.
You should update if:
The issue requires a stored form submission and an authorized WordPress user with access to Form Submissions to open the action Details panel.
This issue affects the admin submission details view. It does not affect normal front-end page rendering for visitors.
Get maximum flexibility with unlimited licensing and domain activations.
Get your money back within 60 days of purchase, no questions asked. It's risk-free!
We offer premium support to ensure the ultimate customer experience.
For a limited time, we're offering an unlimited site license for just $199.99/year. Buy now to lock in this price.