Banner Garden WordPress Plugin Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Banner Garden Plugin for WordPress, versions through 0.1.3. The issue arises because the plugin fails to properly sanitize and escape a parameter before displaying it on the page. This vulnerability could be exploited against high-privilege users, such as administrators, or against unauthenticated users.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, which could be used to target high-privilege users such as administrators or unauthenticated users.