Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.

参照URL

• advisory github.com
• advisory nvd.nist.gov
• web everestforms.net
• web gist.github.com