SSL Zen — SSL Certificate Installer & HTTPS Redirects < 4.7.43 - Reflected Cross-Site Scripting

Description

The plugin does not properly sanitize and escape a request parameter before echoing it back to the browser, making it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser whenever they can be induced to perform an action such as clicking a link.