Input validation vulnerability in Comments – wpDiscuz 7.6.12

The Comments – wpDiscuz plugin for WordPress is vulnerable to a security issue which affects all versions up to, and including, 7.6.12. This issue allows an attacker with administrator-level permissions to inject malicious web scripts into pages which will execute whenever a user visits them. This only applies to multi-site installations or installations where a specific security setting has been disabled.