The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.

Published Jan 4, 2018 · Updated Aug 5, 2024 · Assigned by mitre