WordPress All In One Favicon plugin version 4.6 suffers from a cross site scripting vulnerability. Continue reading...