Description The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. References https://wordpress.org/plugins/gnucommerce/#developers