Description
WordPress Plugin Subscribe to Comments is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials; other attacks are also possible. WordPress Plugin Subscribe to Comments versions prior to 2.0.8 are vulnerable.
Remediation
Update to plugin version 2.1 or latest
References
Related Vulnerabilities
Craft CMS Improper Authentication Vulnerability (CVE-2024-41800)
WordPress Plugin spideranalyse Cross-Site Scripting (0.0.1)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (3.5.5)
Oracle Application Server CVE-2008-4017 Vulnerability (CVE-2008-4017)
WordPress Plugin Community Events 'id' Parameter SQL Injection (1.2.2)