WordPress Peadig's Google +1 Button DOM-Based Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the WordPress plugin Peadig's Google +1 Button, affecting versions through 0.1.2. This issue allows for DOM-based XSS, where a malicious actor could inject harmful scripts that are executed when users visit the site.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser. This could lead to the injection of malicious payloads such as redirects or advertisements.