Input validation vulnerability in Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease! 2.0.4.1

The Everest Forms plugin for WordPress has a security vulnerability that allows people with administrator-level permission to inject malicious web scripts into pages. These scripts will then execute whenever another user visits the page. This vulnerability only affects WordPress multi-site installations and installations where the feature called ‘unfiltered_html’ has been disabled. The issue has been fixed in the latest version, 2.0.4.1, but all versions before that are still vulnerable.