CVE-2023-2321

Name of the Vulnerable Software and Affected Versions WPForms Google Sheet Connector WordPress plugin versions prior to 3.4.6 gsheetconnector-wpforms-pro WordPress plugin versions prior to 3.4.6

Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly escaped before being outputted back in an attribute. This could be exploited against high-privilege users, such as administrators.

Recommendations For WPForms Google Sheet Connector WordPress plugin versions prior to 3.4.6, update to version 3.4.6 or later. For gsheetconnector-wpforms-pro WordPress plugin versions prior to 3.4.6, update to version 3.4.6 or later.