Unknown Gsheetconnector Ninja Forms Pro vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Gsheetconnector Ninja Forms Pro, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2023-2333gsheetconnectorninja_forms_google_sheet_connector+4
EPSS score
0.72%
The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin through 1.2.7 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin