Description The cforms2 plugin before 10.2 for WordPress has XSS. References https://wordpress.org/plugins/cforms2/#developers https://wpvulndb.com/vulnerabilities/9621