Product
The Optimole WordPress plugin is vulnerable to stored Cross-Site Scripting via the comment parameter, allowing unauthenticated attackers to execute arbitrary scripts due to improper output encoding during rendering.