CVE-2025-3201 — Kali Forms < 2.4.3 - Contributor+ Stored XSS
The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users …
Published: 2025-05-16 · CVSS: 5.9 · CVSS 3.1
The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7