Input validation vulnerability in Anti-Malware Security and Brute-Force Firewall 4.15.17

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Scripting in versions from 4.15.17 and below. This vulnerability allows attackers to inject malicious web scripts into a victim’s browser which can then be executed. To protect against this, the plugin needs to ensure that all user input is validated and all output is escaped.