Medium · 5.9 CVE-2023-52203 EUVD-2023-56876GHSA-r7v9-5wqr-cqv8

WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)

Published Jan 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Oliver Seidel, Bastian Germann Product: CformsII

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS.This issue affects cformsII: from n/a through 15.0.5.

Affected products

Vendor	Product	Affected	Fixed
Oliver Seidel, Bastian Germann	cformsII	≤ 15.0.5	—

References

https://patchstack.com/database/vulnerability/cforms2/wordpress-cformsii-plugin-15-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry