< 1.4.11
1.4.11
The simple-fields plugin before 1.4.11 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.