Product
The NEX-Forms - Ultimate Forms Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to and including 9.3.2 due to insufficient input sanitization and output escaping.