Product
The NotificationX plugin for WordPress contains a Stored Cross-Site Scripting vulnerability in the name parameter, allowing unauthenticated attackers to execute arbitrary web scripts.