WordPress Slideshow CK plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress Slideshow CK plugin prior to 1.4.10, which stems from not cleaning up and escaping Slide’s description. An attacker could exploit this vulnerability to execute JavaScript code on the client side.