WordPress Export All URLs plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of the WordPress Export All URLs plugin prior to 4.2, which stems from the plugin’s failure to clean and escape CSV filenames before exporting them back to the page. The vulnerability is caused by the plugin’s failure to clean and escape CSV filenames before exporting them back to the page, which can be exploited to cause a reflected cross-site scripting attack.