Description The cforms2 plugin before 10.5 for WordPress has XSS. References https://wordpress.org/plugins/cforms2/#developers