TI-2013-05942 CVE-2013-7276 · GHSA-w2cq-5vg4-f6q9Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend…Priority LOW 25Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the current_url parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0238 · Published 2014-01-08 · No fix listed CWE-79