Product
The Flying Images WordPress plugin version 2.4.15 and earlier contains a stored XSS vulnerability in the comment parameter, allowing unauthenticated attackers to execute arbitrary scripts after comment approval.