CyberRota Analysis
AI-GeneratedThe Bit Form WordPress plugin prior to version 3.1.4 is vulnerable due to inadequate sanitization of a display setting, enabling high-privilege users to inject malicious JavaScript into forms. This flaw can lead to cross-site scripting (XSS) attacks, impacting any visitor who interacts with the affected forms. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate potential security risks.
Original NVD Description
The Bit Form WordPress plugin before 3.1.4 does not sanitise one of its conversational-form display settings before rendering it on the public-facing form, allowing high-privilege users (such as administrators, who do not hold the unfiltered_html capability on multisite) to store JavaScript that executes in the browser of any visitor who views the form.