CVE-2024-3113

The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin, in versions prior to 2.12.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . This issue arises because the plugin fails to properly sanitize and escape certain settings, allowing high-privile...