Goodguyandy

**Name of the Vulnerable Software and Affected Versions** Contact Form 7 Math Captcha WordPress plugin versions 2.0.1 and earlier **Description** The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This could be used against high privilege users. **Recommendations** For versions 2.0.1 and earlier, update to a version that properly sanitizes and escapes parameters to prevent Reflected Cross-Site Scripting. As a temporary workaround, consider restricting access to the plugin's functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** WooCommerce Green Wallet Gateway WordPress plugin versions prior to 1.0.2 **Description** The issue is related to a Reflected Cross-Site Scripting vulnerability. It occurs because the `error envision` query parameter is not properly escaped before being outputted to the page. This allows for potential malicious script injection. **Recommendations** For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the page where the `error envision` query parameter is used until a patch is applied. Avoid using the `error envision` query parameter in affected pages until the issue is resolved.