CVE-2023-52203

MEDIUM 4.8CVE-2023-52203 · Published 08/01/2024 · updated 17/06/2026

In short

CVE-2023-52203 is a MEDIUM (CVSS 4.8) vulnerability affecting cformsii (cformsii project).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 24.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cformsii cformsii_project	`≤ 15.0.5`	No fix yet

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS.This issue affects cformsII: from n/a through 15.0.5.

References

patchstack.com/database/vulnerability/cforms2/wordpress-cformsii-plugin-15-0-5-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in cformsii

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free