Ahmed

**Name of the Vulnerable Software and Affected Versions** Contact Form 7 Math Captcha WordPress plugin versions 2.0.1 and earlier **Description** The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This could be used against high privilege users. **Recommendations** For versions 2.0.1 and earlier, update to a version that properly sanitizes and escapes parameters to prevent Reflected Cross-Site Scripting. As a temporary workaround, consider restricting access to the plugin's functionality until a patch is available.