DOM-based XSS via OptinMonster reCAPTCHA Reset

When an OptinMonster campaign popup containing a WPForms form is shown, WPForms' `bindOptinMonster()` handler calls `optinMonsterRecaptchaReset()` to re-render the reCAPTCHA/hCaptcha/Turnstile widget inside the popup. The vulnerable code read the widget's `data-sitekey` attribute value and built a new widget element via raw HTML string... Weiterlesen