Create Custom Forms for WordPress Smart Form Plugin Arbitrary Shortcode Execution Vulnerability

A vulnerability allowing arbitrary shortcode execution has been identified in the 'Create custom forms for WordPress with a smart form plugin for smart businesses' plugin, in all versions through 1.2.4. The issue arises because the plugin does not properly validate values before executing them as shortcodes, allowing unauthenticated attackers to execute arbitrary shortcodes.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shortcodes, which may allow attackers to execute malicious code or actions on behalf of the user.