Vulnerabilities in the WP-UserOnline for WordPress

There was found Cross-Site Scripting and Full path disclosure vulnerability in WP-UserOnline plugin for WordPress. These vulnerabilities, found one site that uses this plugin. What

soon tell developers.

Details of vulnerabilities will come soon. First, inform the plugin developers.

XSS:

With special request to the site can conduct XSS attacks. This requires a special way (not the browser) to send a GET request to the page http://site/? <script> Alert

(document