WP Hardening < 1.2.2 - Reflected XSS via URI

The plugin did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.

https://example.com/wp-admin/plugins.php?%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Cv=