CVE-2014-10377

CVE-2014-10377 affects the WordPress plugin cforms2 (before 13.2). The vulnerability is an XSS in lib_ajax.php within the cforms2 component. The issue allows injection of crafted data leading to potential client-side code execution and partial integrity impact per CVSS 3.1 metrics, with network a...