Medium severity6.1NVD Advisory· Published Jul 4, 2023· Updated Jun 17, 2026
CVE-2023-2321
CVE-2023-2321
Description
The WPForms Google Sheet Connector WordPress plugin before 3.4.6, gsheetconnector-wpforms-pro WordPress plugin through 3.4.6 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: <3.4.6
- Range: through 3.4.6
cpe:2.3:a:gsheetconnector:wpforms_google_sheet_connector:*:*:*:*:free:wordpress:*:*+ 1 more
- cpe:2.3:a:gsheetconnector:wpforms_google_sheet_connector:*:*:*:*:free:wordpress:*:*range: <3.4.6
- cpe:2.3:a:gsheetconnector:wpforms_google_sheet_connector:*:*:*:*:pro:wordpress:*:*range: <=3.4.6
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/79a56359-f7e8-4c8c-b0aa-6300f5d57880nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.