Input validation vulnerability in Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms 1.25.9

The Happyforms plugin for WordPress is vulnerable to a type of cyber attack called Reflected Cross-Site Scripting. This means that if an unauthenticated attacker can get someone to click on a link, they can inject malicious code into the page. All versions of the plugin up to and including version 1.25.9 are vulnerable to this type of attack because the plugin does not properly check the input or prevent malicious scripts from running.