The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions.CreditsmgthuramoemyintWPScanReferenceshttps://wpscan.com/vulnerability/1806fef3-d774-46e0-aa48-7a101495f4eb/
