WordPress WS Form plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of WordPress WS Form plugin prior to 1.8.176, which stems from the WS Form plugin’s failure to clean up and escape its form names, and can be exploited by attackers to perform cross-site scripting attacks.