WordPress WP 2FA plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP 2FA plugin version 2.2.1 before version 2.2.1 has a cross-site scripting vulnerability that stems from parameters that are not properly cleaned and escaped when passed back to the admin page. An attacker could exploit this vulnerability to execute JavaScript code on the client side.