XSS Flaw in WordPress Plugin Allows Injection of Malicious Code
Hardly a week goes by without some new vulnerability in WordPress or one of its components showing up on a mailing list or in a security advisory. This week's first entrant is a newly disclosed flaw in a plugin that displays ad banners on WordPress sites, a bug that enables an attacker to inject malicious Javascript or HTML code on any vulnerable site.
read more
Source:
XSS Flaw in WordPress Plugin Allows Injection of Malicious Code
