The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Easy_forms_for_mailchimp | Yikesinc | * | 6.8.8 (including) |