WordPress SEUR Oficial plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of WordPress SEUR Oficial plugin prior to 1.7.0, which stems from the plugin’s failure to clean up and escape certain of its settings. An attacker could exploit this vulnerability to perform cross-site scripting attacks.