CyberRota Analysis
AI-GeneratedThe Post Status Notifier Lite plugin for WordPress versions prior to 1.13.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) attack due to improper escaping of the `mod` URL parameter on the admin settings page. This vulnerability can be exploited by attackers to execute malicious scripts in the context of an administrator's session, potentially compromising the integrity of the WordPress site. WordPress administrators using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the admin settings page (`admin.php?page=post-status-notifier-lite`), leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's session when they are tricked into following a crafted URL.