Unknown Contact Form Builder With Drag & Drop For Wordpress vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Contact Form Builder With Drag & Drop For Wordpress, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4MediumCVE-2025-3201kaliforms · kali_forms +2 moreKali Forms < 2.4.3 - Contributor+ Stored XSSThe Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.EPSS0.26%