Input validation vulnerability in Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More 6.9.20

The Advanced Access Manager plugin for WordPress has a security issue that makes it vulnerable to a type of attack called Reflected Cross-Site Scripting. This can happen in versions up to and including 6.9.20 because the plugin does not properly clean or protect the information it receives and displays. This means that someone who is not logged in or authorized could potentially insert harmful code into a page, which would then run if a user is tricked into clicking on a link.