Anonform WordPress Plugin DOM-Based Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Anonform WordPress plugin, specifically in the 'embedded secure form' feature, affecting versions through 1.7. This vulnerability allows for DOM-based XSS, where a malicious actor could inject harmful scripts that are executed in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user, potentially leading to session hijacking, defacement, or redirection to malicious sites.

Remediation

Users of the Anonform WordPress plugin should update to version 1.8 or later to address this vulnerability.