Contact Form by WPForms – Drag & Drop Form Builder for WordPress, d973f3d44cf250923d766768efbe28a28351af29

CVE, Research URL: d973f3d44cf250923d766768efbe28a28351af29
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Dec 07, 2018
Research Description: WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More [wpforms-lite] < 1.4.8 WordPress Contact Form by WPForms plugin <= 1.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability Authenticated Stored Cross-Site Scripting (XSS) vulnerability found by RIPS Technologies in WordPress Contact Form by WPForms plugin (versions <= 1.4.7).
Affected versions: max 1.4.8.
Status: vulnerable