CVE-2021-24168 Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)

The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields such as Email Subject, Email Recipient, etc when creating or editing a form, leading to an authenticated author+ stored cross-site scripting issue. This could allow medium privilege accounts such a...

CVE-2021-24168

CVE-2021-24168 affects the Easy Contact Form Pro WordPress plugin prior to 1.1.1.9. The vulnerability is an authenticated stored XSS caused by insufficient sanitization of text fields (e.g., Email Subject, Email Recipient) during form creation/editing. This could allow medium-privilege accounts (...