Contact Form by WPForms – Drag & Drop Form Builder for WordPress, 006047c3-2d46-4075-91fe-b55f4b7a4b06

CVE, Research URL: 006047c3-2d46-4075-91fe-b55f4b7a4b06
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: -
Research Description: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.6.0.2 Contact Form by WPForms < 1.6.0.2 - Authenticated Stored Cross-Site Scripting (XSS) Vishnupriya Ilango from Fortinet's FortiGuard Labs discovered an authenticated stored Cross-Site Scripting issue via the choice label parameter inside the form builder that interacts with live preview.
Affected versions: max 1.6.0.2.
Status: vulnerable