Input validation vulnerability in Contact Form by FormGet – Best Form Builder Plugin for WordPress 5.5.5

The Contact Form by FormGet plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting. This attack can occur when using the ‘formget’ shortcode in versions up to and including 5.5.5, because the plugin does not properly check or escape the content that users enter. This means that someone with contributor-level or higher privileges can inject malicious code into web pages. This code will execute whenever anyone visits the page, potentially causing harm to them or their computer.