CVE-2023-3501

CVE-2023-3501 affects the FormCraft WordPress plugin prior to 1.2.7. The issue is insufficient sanitisation/escaping of certain settings, enabling a Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). Reported impact is stored XSS with...