Custom Twitter Feeds < 2.5.5 - Unauthenticated Stored XSS via Cached Tweet Text

Description

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient output escaping in the `CTF_Display_Elements::get_post_text()` function when rendering cached tweet text. The `ctf_get_more_posts` AJAX action is available to unauthenticated users and directly outputs cached tweet data through `nl2br()` without HTML escaping. When malicious content is injected into the cached tweet data (either by tweeting content picked up by the site's feed configuration, or through other vulnerabilities), the script is executed in the session of any user accessing the affected endpoint.