The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.Referenceshttps://wordpress.org/plugins/all-in-one-schemaorg-rich-snippets/#developers
