WordPress Jeeng Push Notifications plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Jeeng Push Notifications plugin version 2.0.4 has a cross-site scripting vulnerability, which originates from the failure to clean up and escape some settings, and can be exploited by a highly privileged attacker such as an administrator to launch a stored cross-site scripting attack.