CVE-2014-125109

The CVE-2014-125109 entry concerns the BestWebSoft Portfolio Plugin (WordPress) up to version 2.27, specifically the function bws_add_menu_render in bws_menu/bws_menu.php. The vulnerability arises from manipulation of the bwsmn_form_email argument, enabling cross-site scripting (XSS). Exploitatio...