The slider import search feature of the plugin settings did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue
https://example.com/wp-admin/edit.php?post_type=wcps&page=import_layouts&keyword="onmouseover=alert(1);//
0xB9
Yes
2021-05-06 (about 2 years ago)
2021-05-06 (about 2 years ago)
2021-05-07 (about 2 years ago)