The quotes-and-tips plugin before 1.20 for WordPress has XSS.Referenceshttps://wpvulndb.com/vulnerabilities/8359https://wordpress.org/plugins/quotes-and-tips/#developers