Threats tagged 'ghsa-qxrf-6734-p6v9'

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin is affected by a stored Cross-Site Scripting (XSS) vulnerability in the Rich Text Editor Field. This vulnerability exists in all versions up to and including 2.10.2 and allows unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.