Cpe:2.3:a:sonaar:mp3_audio_player:*:*:*:*:*:*:*:*

A stored XSS vulnerability in the Sonaar MP3 Audio Player WordPress plugin allows attackers to trigger administrative account creation by injecting malicious scripts that execute when viewed by an administrator.