Tarteaucitron WordPress Plugin Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Tarteaucitron WordPress plugin, affecting versions prior to 0.3.0. This vulnerability allows users with author roles and above to inject HTML into posts or pages, potentially enabling users with contributor roles to execute cross-site scripting attacks that are stored and could be triggered later.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the post or page.

Remediation

Users are advised to update the Tarteaucitron WordPress plugin to version 0.3.0 or later.