CVE-2023-2324

CVE-2023-2324: Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSS

Vendor Unknown
Product Elementor Forms Google Sheet Connector
Published July 4, 2023
Last update November 21, 2024

CVSS base score

What the vulnerability does

01Description

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPress plugin through 1.0.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Key dates

02Disclosure timeline

July 4, 2023 CVE published
November 21, 2024 Record updated