CPE
The Frontend Admin by DynamiApps plugin for WordPress contains a stored cross-site scripting vulnerability in the acf-frontend-form-element component that allows attackers to inject malicious scripts.