Rich Shortcodes for Google Reviews < 6.8.1 - Unauthenticated Stored XSS via Google Review

Description

The plugin is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially patched in version 6.6.2.