WordPress Simple Tracking plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of WordPress Simple Tracking plugin prior to 1.7, which stems from the plugin’s failure to clean and escape its settings, and could be exploited by attackers to perform cross-site scripting attacks. The vulnerability is caused by the plugin’s failure to clean and escape its settings, which can be exploited to perform cross-site scripting attacks.