Input validation vulnerability in Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 1.15.18

The Form Maker by 10Web plugin for WordPress is vulnerable to a type of malicious attack called Stored Cross-Site Scripting. This is a security issue that affects versions of the plugin up to and including 1.15.18. This vulnerability makes it possible for unauthenticated (not logged in) attackers to inject malicious code into pages on the website. When a user visits the injected page, the malicious code will execute, which could lead to personal information being stolen or other malicious activity. To prevent this from happening, it is important to make sure you are running the latest version of the plugin.