The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.Referenceshttps://wpvulndb.com/vulnerabilities/9974