The Contact Form & Lead Form Elementor Builder WordPress plugin prior to 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
themehunk contact form \\& lead form elementor builder |