Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.1%
exploitation probability
1.1%top 38% of all CVEs
observed exploitation
nono source reports it
The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting
Affected products
Unknown · Anti-Malware Security and Brute-Force Firewall