PT-2021-16111

Name of the Vulnerable Software and Affected Versions youForms for WordPress plugin versions 1.0.0 through 1.0.5 Description The issue allows high privilege users, such as editors and admins, to perform Cross-Site Scripting attacks. This is possible because the Button Text field of the plugin's...

CVE-2021-24596: Improper Neutralization of Input During Web Page Generation

The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users editors and admins to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...