WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.6 - Reflected Cross-Site Scripting
mediumThe WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject a...
- CVSS:
- 6.1
- Affected:
- up to 1.1.6
- Fixed in:
- 1.1.7
- Disclosed:
- Jan 27, 2025