< 1.2.7
1.2.7
The smokesignal plugin before 1.2.7 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.