WordPress插件Advanced Database Cleaner跨站脚本漏洞

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin Advanced Database Cleaner version 3.0.4 before there is a cross-site scripting vulnerability, the vulnerability stems from the plugin does not clean and escape $ GET keys and values before outputting properties, there are no details of the vulnerability provided.