Description
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the unfiltered_html capability is disallowed
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Stop Spammers Security | Block Spam Users, Comments, Forms | 2021.18 – < 2021.18 | 2021.18 |