WordPress Metform Elementor Contact Form Builder Plugin < 3.3.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmet:metformelementorcontactformbuilder"; if description...

CVE-2023-0710

CVE-2023-0710 (Metform Elementor Contact Form Builder for WordPress) has a documented Cross-Site Scripting vulnerability in versions up to 3.3.0, exploitable by authenticated attackers with contributor-level permissions or higher. The issue involves echoing unescaped form submissions via the fnam...