The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/flickr-justified-gallery/#developers