TI-2014-05967 CVE-2014-7151 · GHSA-8prx-qgc2-v874Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0…Priority LOW 30Multiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the form_fields parameter in a (1) do_edit or (2) do_…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01155 · Published 2016-01-08 · No fix listed CWE-79