WordPress Fast Flow plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress Fast Flow plugin prior to 1.2.12, which stems from the plugin’s failure to clean up and escape page parameters before outputting properties back to the admin dashboard. An attacker could exploit this vulnerability to execute JavaScript code on the client side.