CVE-2021-38326

Name of the Vulnerable Software and Affected Versions: Post Title Counter WordPress plugin versions up to and including 1.1

Description: The issue allows attackers to inject arbitrary web scripts via the notice parameter found in the ~/post-title-counter.php file, enabling Reflected Cross-Site Scripting attacks.

Recommendations: For versions up to and including 1.1, update to a version that fixes this issue to prevent Reflected Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the ~/post-title-counter.php file or disabling the notice parameter until a patch is available.