WordPress Custom Banners Plugin <= 1.2.2.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the “custom_banners_registered_name” parameter to wp-admin/options.php.

Solution

           Update the plugin.