{"uuid": "2ff02bec-12a2-42bf-a1b7-6bd53ea25b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/hacking_Attack/49606", "content": "Exploit Collector\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nWordPress Anti-Malware Security and Brute-Force Firewall plugin versions prior to 4.20.96 suffer from a cross site scripting vulnerability.\n\nMD5 | 2f8b972a36566b684356e0ea7f6fb4c0\n\nDownload\nTittle:\nWordPress Plugin Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting\n\nReferences:\nCVE-2022-0953\n\nAuthor:\nTaurus Omar \n\nDescription:\nThe plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters.\n\nAffects Plugins:\nGotmls - Fixed in version 4.20.96\n\nProof of Concept:\nGET /wp-admin/admin.php?page=GOTMLS_View_Quarantine&a=\">\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:46.638521Z"}