Input validation vulnerability in Comments – wpDiscuz 7.6.10

The wpDiscuz plugin for WordPress is vulnerable to a type of security problem called Arbitrary Content Injection in versions up to 7.6.10. This vulnerability allows unauthenticated attackers (people who don’t have permission to be on the website) to add new content to the website without authorization. This could be used to make new web pages, post spam, or phishing attempts. The cause of this vulnerability is not known yet.