WordPress Blogstand Banner Plugin <= 1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "bsblogid" parameter to wp-admin/options-general.php. Solution Update the plugin...