WordPress Plugin Vulnerabilities
Contact Form by WPForms < 1.5.9 - Authenticated Cross-Site Scripting (XSS)
Description
The popular WordPress plugin, WPForms, was found to be vulnerable to Authenticated Cross-Site Scripting (XSS). The Form Description and Field Description fields in the WPForms plugin’s Form Builder module was found to be vulnerable to stored XSS, as they did not sanitize user given input properly.
Affects Plugins
Fixed in version 1.5.9
References
Classification
Miscellaneous
Original Researcher
Jinson Varghese Behanan
Submitter
Jinson Varghese Behanan
Submitter website
Submitter twitter
Verified
No
Timeline
Publicly Published
2020-03-05 (about 2 years ago)
Added
2020-03-05 (about 2 years ago)
Last Updated
2020-12-22 (about 1 years ago)