A vulnerability has been discovered in the Wysija Newsletters plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability is caused due to a bundled vulnerable version of swfupload.

For more information:
SA49651

The vulnerability is confirmed in version 2.1.6. Prior versions may also be affected.

Solution
Update to version 2.1.7.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://wordpress.org/extend/plugins/wysija-newsletters/changelog/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers