WordPress WP Contact Slider plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress WP Contact Slider plugin prior to 2.4.7, which stems from a failure to clean and escape the Text to Display setting of the slider . An attacker could exploit this vulnerability to perform cross-site scripting attacks.