Contact Form by WPForms – Drag & Drop Form Builder for WordPress, 1da2940722f48d1690d6dd8e27da295463f1d8f1

CVE, Research URL: 1da2940722f48d1690d6dd8e27da295463f1d8f1
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Jul 01, 2020
Research Description: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More [wpforms-lite] < 1.6.0.2 WordPress Contact Form by WPForms plugin <= 1.6.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Fortinet in WordPress Contact Form by WPForms plugin (versions <= 1.6.0.1).
Affected versions: max 1.6.0.2.
Status: vulnerable