Easy Form Builder < 3.4.0 - Admin+ Stored XSS

1. Navigate to New Form » go to the Settings of the Button and add the payload into the "Text" section: ><img src=x onerror=alert(/XSS/)>

2. You will observe that the payload successfully got stored in the database, and when you are triggering the same functionality in the time JavaScript payload is executing successfully, and we are getting a pop-up.