WordPress Stop Spammers <2021.9 - Cross-Site Scripting
WordPress Stop Spammers plugin before 2021.9 contains a reflected cross-site scripting vulnerability. It does not escape user input when blocking requests (such as matching a spam word), thus outputting it in an attribute after sanitizing it to remove HTML tags.
PoC 已收录stop_spammers
CVSS6.1EPSS 5.7%