Maspik Spam Blacklist
Monthly
Cross-site scripting in Maspik - Spam Blacklist WordPress plugin (versions ≤ 2.9.1) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser when they interact with a crafted URL or page. The plugin, designed to intercept spam submissions in contact forms, fails to adequately sanitize or escape user-supplied input before rendering it in HTML output. No public exploit code has been identified at time of analysis, and no active exploitation has been confirmed by CISA KEV.
Cross-site scripting in Maspik - Spam Blacklist WordPress plugin (versions ≤ 2.9.1) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser when they interact with a crafted URL or page. The plugin, designed to intercept spam submissions in contact forms, fails to adequately sanitize or escape user-supplied input before rendering it in HTML output. No public exploit code has been identified at time of analysis, and no active exploitation has been confirmed by CISA KEV.