WordPress WPQA plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress WPQA plugin prior to 5.4, which stems from the plugin’s failure to clean up and escape parameters on the reset password form. An attacker could exploit this vulnerability to execute JavaScript code on the client side.