< 1.0.8
1.0.8
The corner-ad plugin before 1.0.8 for WordPress has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.