WordPress Visitors plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Visitors is a plugin for WordPress. WordPress Visitors plugin 0.3 and earlier versions have a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the web application. An attacker could exploit this vulnerability to display a user’s user agent string in the WordPress admin panel without validation or encoding.