The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.CreditsAbdulali AlDuraziReferenceshttps://wpscan.com/vulnerability/3afaed61-6187-4915-acf0-16e79d5c2464
