Input validation vulnerability in WP Service Payment Form With Authorize.net 2.6.3

The WP Service Payment Form With Authorize.net plugin for WordPress is at risk of a type of cyber attack called Reflected Cross-Site Scripting. This is because the plugin does not properly protect against harmful code being entered into the ‘page’ section of the form. This means that someone who is not logged in or authorized could potentially insert harmful scripts into the website that could be activated if a user clicks on a link.