CyberRota Analysis
AI analysis pending.
CVE
CVE-2021-24907
Severity
MEDIUM
CVSS
6.1
EPSS
0.91%
WordPress
Original NVD Description
The Contact Form, Drag and Drop Form Builder for WordPress plugin before 1.8.0 does not escape the status parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue