WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-66919)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in WordPress Plugin Form Maker, which stems from a vulnerability in versions of Form Maker prior to 1.13.60 when editing in the admin dashboard form, the plugin would not escape its form title before exporting it to properties, leading to an authenticated stored cross-site scripting issue. No details of the vulnerability are currently available.