A persistent XSS vulnerability was found in wp-feedstats < 2.4 by David Kierznowski of BlogSecurity.

BlogSecurity released a warning regarding a critical security vulnerability found in WordPress wp-feedstats plugin. The author has made this information public, and thus the advisory has been released early with details found at the plugins homepage. We advise all wp-feedstats users to please upgrade to the latest version, available here.

Affected: wp-feedstats < 2.4
Reported: 12 July 2007
Fixed: 20 July 2007

BlogWatch has been updated with this vulnerability.