CyberRota Analysis
AI analysis pending.
CVE
CVE-2021-24967
Severity
MEDIUM
CVSS
6.1
EPSS
1.17%
WordPress
Original NVD Description
The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads
Related CVEs
Other vulnerabilities affecting the same vendor(s)