WordPress Delay Redirects Plugin DOM-Based Cross-Site Scripting Vulnerability

A DOM-based cross-site scripting vulnerability has been identified in the WordPress Delay Redirects plugin, specifically in versions through 1.0.0. This issue arises from improper input neutralization during web page generation, allowing malicious actors to inject harmful scripts that could be executed when users visit the affected site.

Impact

Exploitation of this vulnerability could enable attackers to inject and execute malicious scripts on the website, potentially leading to the execution of harmful payloads such as redirects or advertisements, when visited by users.