WordPress Simple Download Counter plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Plugin Simple Download Counter 1.6 and earlier versions, which stems from the fact that it does not escape certain user-supplied attribute parameters, and can be exploited by an attacker to inject malicious script into a web site.