WordPress Advanced Floating Content plugin <= 1.2.1 - Multiple Auth. Cross-Site Scripting (XSS) vulnerabilities

Multiple Auth. Cross-Site Scripting (XSS) vulnerabilities were discovered by Tien Nguyen Anh (Patchstack Alliance) in the WordPress Advanced Floating Content plugin (versions <= 1.2.1).

Solution

           Update the WordPress Advanced Floating Content plugin to the latest available version (at least 1.2.2).