Live Summary For Gravity Forms
Monthly
Reflected cross-site scripting (XSS) in the Live Summary for Gravity Forms plugin (versions through 1.2.10) allows remote attackers to execute arbitrary script in a victim's browser by tricking them into visiting a crafted URL. Exploitation requires the victim to interact with the link and the targeted site to have the plugin active alongside Gravity Forms, with the highest risk when an authenticated administrator is tricked. No public exploit has been identified at the time of analysis.
Reflected cross-site scripting (XSS) in the Live Summary for Gravity Forms plugin (versions through 1.2.10) allows remote attackers to execute arbitrary script in a victim's browser by tricking them into visiting a crafted URL. Exploitation requires the victim to interact with the link and the targeted site to have the plugin active alongside Gravity Forms, with the highest risk when an authenticated administrator is tricked. No public exploit has been identified at the time of analysis.