≤ 1.1.9
Reflected XSS in wordpress plugin new-year-firework v1.1.9
Running one of these products? Scan your site to see whether it exposes a vulnerable version.