Input validation vulnerability in Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder 5.1.19

The plugin called Contact Form by Fluent Forms, which is used to create quizzes, surveys, and drag and drop forms on WordPress, has a security vulnerability. This vulnerability is called Stored Cross-Site Scripting and it affects all versions of the plugin up to 5.1.19. This happens because the plugin does not properly filter and protect information entered in the ‘description’ and ‘btn_txt’ fields. This allows malicious users with certain permissions and roles to insert harmful code into pages, which will then run whenever someone visits those pages.