WordPress Class Reference Plugin <= 2.4.8 - XSS

Because of this vulnerability in facture.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...