WordPress Bradesco Gateway Plugin <= 2.0 - XSS

Because of this vulnerability in falha.php, the attackers can inject arbitrary web script or HTML via the QUERYSTRING. Solution Update the plugin...