WordPress Brizy plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in versions of the WordPress Brizy plugin prior to 2.4.2, which stems from the plugin’s failure to filter and escape certain URL elements, and could be exploited to execute a stored cross-site scripting attack.