Description The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. References https://wordpress.org/plugins/cforms2/#developers https://wpvulndb.com/vulnerabilities/9812