Input validation vulnerability in XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] 1.6.3

The XPlainer is a plugin for WordPress called WooCommerce Accordion FAQ that helps with organizing frequently asked questions about products. Unfortunately, this plugin has a security issue called Reflected Cross-Site Scripting, which means that attackers can insert harmful code into the website if they can trick a user into clicking on a link. This can happen in all versions of the plugin up to version 1.6.3 because it does not properly clean and protect the information that is entered and displayed.