WordPress Security plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress WordPress Security plugin versions prior to 4.2.1 have a cross-site scripting vulnerability that stems from a failure to clean and evade certain of its settings, and a highly privileged attacker such as an administrator attacker can use the vulnerability to execute JavaScript code on the client side.