EleForms All In One Form Integration Plugin Vulnerable to Stored Cross-Site Scripting

CVE-2024-2082

Summary

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitization and output escaping methods. This flaw allows unauthenticated attackers to exploit certain parameters, enabling them to inject arbitrary web scripts. These malicious scripts execute when users access compromised pages, potentially leading to serious security implications for both site administrators and visitors.

References