PT-2019-7053 · WordPress · Cforms2

Published 2019-08-21 · Updated 2023-03-01 · CVE-2014-10377

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions cforms2 plugin versions prior to 13.2

Description The issue concerns a cross-site scripting (XSS) problem in the lib ajax.php file of the cforms2 plugin for WordPress.

Recommendations For versions prior to 13.2, update to version 13.2 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-10377

Affected Products

Cforms2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-10377 · Security Note
• https://wordpress.org/plugins/cforms2/#developers · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-10377 · Note
• https://t.me/cvenotify/45251 · Telegram Post
• https://wpvulndb.com/vulnerabilities/9812 · Note
• https://t.me/cibsecurity/6271 · Telegram Post