What are the Vulnerabilities?
There are two vulnerabilities. The first vulnerability allows someone to insert harmful JavaScript into a popup.
The second vulnerability allows the attacker to download subscriber lists and gain access to numerous plugin features.