The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zostala_rozwiazana parameter before outputting it back in an attribute via the super_language_switcher A…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00313·Published 2024-01-16·Fixed in 6.0.4CWE-79