Responsive Contact Form Builder & Lead Generation Plugin, CVE-2021-24967

CVE, Research URL: CVE-2021-24967
Home page URL: Security reports for Responsive Contact Form Builder & Lead Generation Plugin
Application: Responsive Contact Form Builder & Lead Generation Plugin
Published on: Dec 27, 2021
Research Description: The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads
Affected versions: Min -, max 1.6.4.
Status: vulnerable

Responsive Contact Form Builder &amp; Lead Generation Plugin, CVE-2021-24967