WordPress WPQA plugin prior to 5.4 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter on its reset password form.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view