Shortcodes and extra features for Phlox theme, CVE-2022-1910

CVE, Research URL: CVE-2022-1910
Home page URL: Security reports for Shortcodes and extra features for Phlox theme
Application: Shortcodes and extra features for Phlox theme
Published on: Jul 11, 2022
Research Description: The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Affected versions: max 2.9.8.
Status: vulnerable