WordPress WP User Stylesheet Switcher Stored Cross-Site Scripting Vulnerability via Cross-Site Request Forgery

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress WP User Stylesheet Switcher plugin, affecting versions through 2.2.0, allows for Stored Cross-Site Scripting (XSS) attacks. This vulnerability could enable an attacker to manipulate users with higher privileges into performing actions that could lead to the execution of malicious scripts.

Impact

Exploitation of this vulnerability could result in Stored Cross-Site Scripting, where injected scripts are executed in the context of the user.

Remediation

Users are advised to remove and replace the WP User Stylesheet Switcher plugin, as it is likely abandoned and will not receive further updates or fixes.