Lucene search

K
wpvulndbBastian GermannWPVDB-ID:8CE453E5-6EAC-4991-BFAF-260D34E0A71B
HistoryNov 01, 2010 - 12:00 a.m.

Cforms <= 13.1 - 'lib_ajax.php' Cross-Site Scripting (XSS)

2010-11-0100:00:00
Bastian Germann
wpscan.com
10

The cforms plugin has a XSS vulnerability in file lib_ajax.php with rs and rsargs[] parameters. It is fixed in version 13.2. The cforms2 fork was forked at 14.6, so it is not affected.

CPENameOperatorVersion
cformslt13.2