WordPress Feed Them Social plugin before 3.0.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the page.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view