CVE-2017-20096

Name of the Vulnerable Software and Affected Versions WP-SpamFree Anti-Spam Plugin version 2.1.1.4

Description A problematic vulnerability has been found in the WP-SpamFree Anti-Spam Plugin, allowing for basic cross-site scripting. The manipulation can be initiated remotely, affecting an unknown part of the plugin.

Recommendations For WP-SpamFree Anti-Spam Plugin version 2.1.1.4, consider disabling the plugin until a patch is available to prevent basic cross-site scripting attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.