WordPress Event List plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Event List plugin versions prior to 0.8.8 contain a cross-site scripting vulnerability that stems from a failure to clean up and escape certain settings of the plugin. An attacker could exploit this vulnerability to execute JavaScript code on the client side.