CVE-2015-9347

The wp-plotly WordPress plugin (versions prior to 1.0.3) is affected by a cross-site scripting (XSS) vulnerability. The issue arises from insufficient validation of client-side data in the plugin, enabling an attacker to execute client-side code. Some sources reference an authenticated stored XSS...