WP Gravity Forms Insightly, 78da7e4ebf17bf04d89df5a7a7492deb53506a60

CVE, Research URL: 78da7e4ebf17bf04d89df5a7a7492deb53506a60
Home page URL: Security reports for WP Gravity Forms Insightly
Application: WP Gravity Forms Insightly
Published on: Aug 26, 2021
Research Description: WP Gravity Forms Insightly [gf-insightly] < 1.0.7 CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting Multiple CRM Perks plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the 'vx_debug' parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 1.0.7.
Status: vulnerable