The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin through 1.2.7 does not escape a parameter before outputting it back in an attribute, leading to a Ref…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00717·Published 2023-07-04·Fixed in 1.2.7