WordPress Coming soon and Maintenance plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of the WordPress Coming soon and Maintenance plugin prior to 3.5.3, which stems from the plugin’s failure to properly clean up input submitted by authenticated users. An attacker could exploit to execute JavaScript code on the client side.