CVE-2010-3977
published 2010-11-03CVE-2010-3977: Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject…
PriorityP423medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
4.29%
89.9th percentile
Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| deliciousdays | cforms | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/42006http://www.conviso.com.br/security-advisory-cform-wordpress-plugin-v-11-cve-2010-3977/http://www.securityfocus.com/archive/1/514579/100/0/threadedhttp://www.securityfocus.com/bid/44587https://exchange.xforce.ibmcloud.com/vulnerabilities/62938http://secunia.com/advisories/42006http://www.conviso.com.br/security-advisory-cform-wordpress-plugin-v-11-cve-2010-3977/http://www.securityfocus.com/archive/1/514579/100/0/threadedhttp://www.securityfocus.com/bid/44587https://exchange.xforce.ibmcloud.com/vulnerabilities/62938
2010-11-03
Published