WordPress Bookshelf plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The Bookshelf plugin is an application plugin for WordPress. Bookshelf WordPress plugin version 2.0.4 and earlier is vulnerable to a cross-site scripting vulnerability, which stems from the plugin’s failure to adequately filter its "Paypal The vulnerability is caused by the plugin’s failure to adequately filter checks before exporting its “email address” settings to the page, which could be exploited by an attacker to store cross-site scripting issues.