CVE-2018-11568

Name of the Vulnerable Software and Affected Versions GamePlan theme for WordPress versions prior to 1.5.13.2

Description The issue is related to insufficient input sanitization, allowing for Reflected XSS. This can be demonstrated through the s parameter. In some cases, the '<' and '>' characters are represented as '<' and '>'.

Recommendations For versions prior to 1.5.13.2, update to a version that includes the necessary input sanitization fixes to prevent Reflected XSS. As a temporary workaround, consider restricting user input to prevent the injection of malicious code.