The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.CreditsstealthcopterWPScanReferenceshttps://wpscan.com/vulnerability/3c470edd-4b9b-461e-839f-f3a87f0060aa/
