W3S Cloud Technology W3SCloud Contact Form 7 to Zoho CRM Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the W3SCloud Contact Form 7 to Zoho CRM WordPress plugin, affecting versions through 3.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed by users.

Impact

Exploitation of this vulnerability could enable attackers to perform actions on behalf of users with higher privileges, potentially leading to unauthorized changes or data exposure.

Remediation

Users are advised to remove and replace this plugin, as it has not been updated in over a year and is unlikely to receive further support.