WordPress Plugin Vulnerabilities
Cforms <= 13.1 - 'lib_ajax.php' Cross-Site Scripting (XSS)
Description
The cforms plugin has a XSS vulnerability in file lib_ajax.php with rs and rsargs[] parameters. It is fixed in version 13.2. The cforms2 fork was forked at 14.6, so it is not affected.
Affects Plugins
Fixed in 13.2 References
Classification
Type
XSS
OWASP top 10
CWE
Miscellaneous
Submitter
Bastian Germann
Verified
No
WPVDB ID
Timeline
Publicly Published
2010-11-01 (about 15 years ago)
Added
2017-03-20 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)
WPScan 