WordPress DSGVO All in one for WP cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress DSGVO All in one for WP 4.2 has a cross-site scripting vulnerability that stems from the fact that certain settings are not cleaned and escaped, and even if the unfiltered_html feature is disabled, a highly privileged attacker such as an administrator can use the vulnerability to inject cross-site code and launch XSS attacks.