Medium · 5.9 CVE-2022-44628 EUVD-2022-47564GHSA-x7j5-2qjw-2rrx

WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Published Nov 3, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JumpDEMAND Inc. 4ECPS Web Forms plugin <= 0.2.17 on WordPress.

Vendor	Product	Affected	Fixed
JumpDEMAND	4ECPS Web Forms (WordPress plugin)	<= 0.2.17 – ≤ 0.2.17	—