Input validation vulnerability in Anti-Malware Security and Brute-Force Firewall 4.15.23

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This means that if an unauthenticated attacker can get an administrator to visit a form, they can inject malicious code into web pages. As a result, the code will be executed whenever a user visits the page. This vulnerability is present in versions up to and including 4.15.22 because of inadequate measures to keep the code safe.