CyberRota Analysis
AI-GeneratedThe Easy Form Builder plugin for WordPress prior to version 4.2.0 is vulnerable to stored cross-site scripting (XSS) due to inadequate validation of submitted values, allowing unauthenticated users to inject arbitrary content. This unescaped content is rendered on an admin page, potentially compromising the security of the admin interface. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS.