CVE-2021-38331

Name of the Vulnerable Software and Affected Versions: WP-T-Wap WordPress plugin versions up to and including 1.13.2

Description: The issue allows attackers to inject arbitrary web scripts via the posted parameter found in the ~/wap/writer.php file, enabling Reflected Cross-Site Scripting attacks.

Recommendations: For WP-T-Wap WordPress plugin versions up to and including 1.13.2, consider updating to a version that contains a fix for this issue, as using the posted parameter in the ~/wap/writer.php file poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.