WordPress Menu In Post Plugin DOM-Based Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the WordPress Menu In Post plugin, specifically in versions through 1.4.1. This issue allows for DOM-based XSS, where an attacker can inject malicious scripts that are executed when users visit the affected site.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser. This could be used to hijack user sessions, deface websites, or redirect users to malicious sites.