CyberRota Analysis
AI-GeneratedThe Free Builder for Elementor WordPress plugin prior to version 1.6.7 is vulnerable due to insufficient sanitization of contact form field values, enabling unauthenticated attackers to execute Stored Cross-Site Scripting (XSS) attacks. This vulnerability poses a significant risk as it can lead to the execution of malicious scripts when an administrator views the form submissions in the admin dashboard. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.