The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter.

Published Sep 17, 2019 · Updated Aug 6, 2024 · Assigned by mitre