MikeCen WeChat-Face-Recognition Cross-Site Scripting Vulnerability in wx.php

A cross-site scripting vulnerability has been identified in MikeCen WeChat-Face-Recognition versions prior to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. The issue arises in the wx.php file, specifically within the valid function, where the echostr parameter is not properly sanitized before being output. This flaw allows for the injection of malicious scripts that could be executed in the context of the user's browser. The vulnerability can be exploited remotely, but requires some form of user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser, potentially leading to session hijacking or other malicious actions.