Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-49841 EUVD-2023-53749GHSA-x2v5-rr6p-h9j3

WordPress Optin Forms Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Published Dec 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: FancyThemes Product: Optin Forms – Simple List Building Plugin for WordPress Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress allows Stored XSS.This issue affects Optin Forms – Simple List Building Plugin for WordPress: from n/a through 1.3.3.

Affected products

VendorProductAffectedFixed
FancyThemes Optin Forms – Simple List Building Plugin for WordPress ≤ 1.3.3 —

References