WordPress Google Forms plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Google Forms plugin 0.95 and its previous versions have a cross-site scripting vulnerability, which originates from the failure to clean and escape some settings, and can be exploited by an attacker with high privileges, such as an administrator, to inject cross-site code and launch XSS attacks.