WordPress plugin Contact Form 7 Captcha跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress plugin Contact Form 7 Captcha prior to 0.1.2 are vulnerable to a cross-site scripting vulnerability that stems from the plugin’s failure to escape the $_SERVER[’ REQUEST_URI’] parameter before exporting it back to the property, an attacker could exploit this vulnerability to cause reflected cross-site scripting in older web browsers.