Description
This script is possibly vulnerable to Cross Frame Scripting (XFS) attacks.
This is an attack technique used to trick a user into thinking that fake web site content is legitimate data.
Remediation
Your script should filter metacharacters from user input.
References
Related Vulnerabilities
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.51)
WordPress Plugin Simple Fields Cross-Site Scripting (1.4.11)
WordPress Plugin Knews Multilingual Newsletters 'ff' Parameter Cross-Site Scripting (1.1.0)
WordPress Plugin Yes-co ORES Cross-Site Scripting (1.3.44)
WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.6.07225)