CVE-2017-1000033 – Vospari Forms < 1.4 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-1000033

Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission resulting in javascript code execution in the context on the current user. Wordpress Plugin Vospari Forms versión anterior a 1.4, es vulnerable a un ataque de tipo cross site scripting reflejado en la entrega de formulario resultando en la ejecución de código javascript en el contexto del usuario actual. • https://cjc.im/advisories/0007 https://wpvulndb.com/vulnerabilities/8862 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •