Vendor
The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found_url' parameter, allowing unauthenticated attackers to execute arbitrary scripts in the context of victim browsers.