CVE-2024-11272

The Contact Form & SMTP Plugin for WordPress by PirateForms is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.6.0 . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perf...