Product
An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the Invisible Anti-Spam & CAPTCHA plugin (<= 5.1) allows attackers to inject malicious scripts via the action parameter in admin-ajax.php.