The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.

Published Aug 21, 2019 · Updated Aug 6, 2024 · Assigned by mitre