CyberRota Analysis
AI-GeneratedThe NEX-Forms WordPress plugin prior to version 9.2.3 is vulnerable due to inadequate sanitization and escaping of submitted form data, resulting in a Stored Cross-Site Scripting (XSS) vulnerability. This flaw allows unauthenticated users to execute XSS attacks against high-privilege users, such as administrators, when they access the submitted entries in the admin dashboard. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The NEX-Forms WordPress plugin before 9.2.3 does not sanitise and escape some submitted form data before storing it and outputting it back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as administrators when they view the submitted entries.