CVE-2014-7151 – NEX-Forms Lite – WordPress Contact Form builder < 3.4 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2014-7151

Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the form_fields parameter in a (1) do_edit or (2) do_insert action to wp-admin/admin-ajax.php. Múltiples vulnerabilidades de XSS en el plugin NEX-Forms Lite 2.1.0 para WordPress permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro form_field en una acción (1) do_edit o (2) do_insert en wp-admin/admin-ajax.php. Multiple cross-site scripting (XSS) vulnerabilities in the x-forms-express plugin 2.1.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the form_fields parameter in a (1) do_edit or (2) do_insert action to wp-admin/admin-ajax.php. • https://research.g0blin.co.uk/cve-2014-7151 https://wpvulndb.com/vulnerabilities/8237 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •