Request a Quote Form Plugin < 2.5.3 - Unauthenticated Limited Remote Code Execution

Description

The plugin is vulnerable to Remote Code Execution via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as a function name. This makes it possible for unauthenticated attackers to execute code on the server, however, parameters can not be passed to the functions called.