Product
A stored XSS vulnerability in the Sonaar MP3 Audio Player WordPress plugin allows attackers to trigger administrative account creation by injecting malicious scripts that execute when viewed by an administrator.