The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

Published Aug 20, 2019 · Updated Aug 6, 2024 · Assigned by mitre