CVE-2010-3977

🗓️ 03 Nov 2010 01:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

CVE-2010-3977 XSS vulnerabilities in cforms WordPress plugin 11.

Reporter	Title	Published	Views	Family All 17
Tenable Nessus	cformsII Plugin for WordPress 'rs' Parameter XSS	8 Nov 201000:00	–	nessus
Circl	CVE-2010-3977	1 Nov 201000:00	–	circl
Check Point Advisories	Preemptive Protection against WordPress cforms Plugin Cross-Site Scripting (XSS) Vulnerability	14 Nov 201000:00	–	checkpoint_advisories
Cvelist	CVE-2010-3977	3 Nov 201001:00	–	cvelist
EUVD	EUVD-2010-3954	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#35256978: cforms II vulnerable to cross-site scripting	15 Feb 201200:00	–	jvn
Japan Vulnerability Notes	cforms II vulnerable to cross-site scripting	15 Feb 201208:14	–	jvn
myhack58	WordPress cformsII plugin rs and rsargs parameters to a script injection vulnerability and fix-vulnerability warning-the black bar safety net	8 Nov 201000:00	–	myhack58
NVD	CVE-2010-3977	3 Nov 201013:37	–	nvd
OpenVAS	WordPress Plugin cformsII 'lib_ajax.php' Multiple HTML Injection Vulnerabilities	16 Nov 201000:00	–	openvas

NVD

Node

deliciousdays cformsMatch11.5

AND

wordpress wordpress

Source	Link
securityfocus	www.securityfocus.com/bid/44587
conviso	www.conviso.com.br/security-advisory-cform-wordpress-plugin-v-11-cve-2010-3977/
securityfocus	www.securityfocus.com/archive/1/514579/100/0/threaded
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/62938
secunia	www.secunia.com/advisories/42006

Parameter	Position	Path	Description	CWE
rs	request body	wp-content/plugins/cforms/lib_ajax.php	Cross-site scripting (XSS) via unsanitized POST parameters rs and rsargs[] in cforms lib_ajax.php	CWE-79
rsargs[]	request body	wp-content/plugins/cforms/lib_ajax.php	Cross-site scripting (XSS) via unsanitized POST parameters rs and rsargs[] in cforms lib_ajax.php	CWE-79

29 Apr 2026 01:13Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

EPSS0.0079

cve 2010 3977 xss vulnerabilities cforms wordpress plugin