Stored XSS Vulnerability in Bit Form Contact Form Plugin

CVE-2024-47301

Summary

A security vulnerability exists in the Bit Form – Contact Form Plugin due to improper neutralization of user input during web page generation, leading to a Cross-site Scripting (XSS) risk. This vulnerability allows an attacker to inject malicious scripts into the web application, which can then be executed in the context of another user's session. It impacts all versions of the Bit Form – Contact Form Plugin up to and including version 2.13.10. Attackers exploiting this vulnerability could potentially gain unauthorized access to sensitive information or carry out other malicious actions by manipulating user interactions.

References