WS Form LITE – Drag & Drop Contact Form Builder for WordPress, CVE-2022-23988
- CVE, Research URL
- Home page URL
-
Security reports for WS Form LITE – Drag & Drop Contact Form Builder for WordPress
- Published on
- Feb 28, 2022
- Research Description
- The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission
- Affected versions
-
Min -, max 1.9.118.
- Status
-
vulnerable