WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the Wordpress Plugin Support Board, which stems from the product not doing validation of the data in the notes field. An attacker can execute client-side code through this vulnerability.