Contact Form by WPForms – Drag & Drop Form Builder for WordPress, 8ce83a5d41d591c8bf4b14bcec65c12d6a288dbf

CVE, Research URL: 8ce83a5d41d591c8bf4b14bcec65c12d6a288dbf
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: May 21, 2020
Research Description: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More [wpforms-lite] < 1.6.0.2 Contact Form by WPForms <= 1.6.0.1 - Cross-Site Scripting The Contact Form by WPForms plugin for WordPress has a Cross-Site Scripting vulnerability, which is caused by improper input sanitization of user input via the choice label parameter in versions up to, and including, 1.6.0.1.
Affected versions: max 1.6.0.2.
Status: vulnerable