CVE-2023-2324

CVE-2023-2324: Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSS

Vendor Unknown
Product Elementor Forms Google Sheet Connector
Published July 4, 2023
Last update November 21, 2024

CVSS base score

—

What the vulnerability does

01Description

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPress plugin through 1.0.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Key dates

02Disclosure timeline

July 4, 2023 CVE published
November 21, 2024 Record updated