Input validation vulnerability in All-In-One Security (AIOS) – Security and Firewall 4.4.3

The All In One WP Security & Firewall plugin is a tool for WordPress websites, used to help increase security. Unfortunately, versions up to and including 4.4.3 of the plugin are vulnerable to a type of attack called Reflected Cross-Site Scripting. This type of attack allows unauthenticated attackers to inject malicious code into administrative pages, which could be triggered by a site administrator if they click on a link or take a certain action. It is important to note that this vulnerability was only exploitable on older browsers at the time it was discovered.