6.1
Medium
CVE-2023-4950 The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some…
Description
The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor 3.4 | earliest → < 3.4 | 3.4 |