Social Profilr Cross-Site Request Forgery Vulnerability Allowing Stored Cross-Site Scripting

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Social Profilr WordPress plugin, specifically in versions prior to and including 1.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed within the user's browser session.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, which can lead to Stored Cross-Site Scripting. This means that an attacker could trick a user into performing actions that result in the injection of malicious scripts, which are then stored and executed in the context of the user's session.