WordPress Plugin Simple Image Sizes Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the WordPress plugin Simple Image Sizes, affecting versions through 3.2.3. This vulnerability allows an arbitrary script to be executed in the web browser of an administrator accessing the settings screen.

Impact

Exploitation of this vulnerability could lead to stored cross-site scripting, where injected scripts are executed in the context of the user with administrative privileges.

Remediation

Users are advised to update the Simple Image Sizes plugin to version 3.2.4, which addresses this vulnerability.