Input validation vulnerability in amerisale-re *

The Amerisale-Re plugin for WordPress has a vulnerability that can be exploited by an unauthenticated attacker. An attacker can inject malicious web scripts into pages that a user visits if they can convince the user to perform an action like clicking on a link. This is due to a lack of input sanitization and output escaping in the ‘edit’ parameter of the ‘netriesdetail/upload.php’ file.