title: Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)
description: The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Stop Spammers
vendor: Trumani
versions:
lessThan: 2021.9, status: affected, version: 2021.9, versionType: custom
}