Stored Cross-Site Scripting Vulnerability Affects WPForms Pro Plugin

CVE-2023-7063

What is CVE-2023-7063?

The WPForms Pro plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitization and output escaping in its form submission parameters. This flaw allows unauthenticated attackers the potential to inject arbitrary web scripts into pages. Once these scripts are injected, they can be executed when a user visits the compromised page, thereby compromising the safety and security of the WordPress site.

References