WordPress Video Slider plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of the WordPress Video Slider plugin prior to 1.4.8, which stems from a failure to clean up or escape some of its video settings. An attacker could exploit this vulnerability to execute JavaScript code on the client side.