WordPress Domain Check plugin before 1.0.17 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the domain parameter before outputting it back in the page.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view