WordPress Plugin Vulnerabilities
Contact Form by WPForms < 1.4.8 - Authenticated Stored Cross-Site Scripting (XSS)
Description
The Contact Form by WPForms – Drag & Drop Form Builder for WordPress WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability.
Affects Plugins
Fixed in version 1.4.8
References
Classification
Miscellaneous
Original Researcher
RIPS Technologies
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No
Timeline
Publicly Published
2018-12-02 (about 4 years ago)
Added
2018-12-06 (about 4 years ago)
Last Updated
2020-10-01 (about 2 years ago)