TI-2024-14750 CVE-2024-22149 · GHSA-6rg4-q3ph-9w9gWordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann CformsII allows Stored XSS.This issue affects CformsII: from n/a through 15.0.5.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00371 · Published 2024-03-27 · No fix listed CWE-79