WordPress Stop Spammers <2021.9 - Cross-Site Scripting Detection

WordPress Stop Spammers plugin before 2021.9 contains a reflected cross-site scripting vulnerability. It does not escape user input when blocking requests such as matching a spam word, thus outputting it in an attribute after sanitizing it to remove HTML tags. !/usr/bin/env python3 -- coding: utf...