CVE-2015-9407 (xpinner_lite)

The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS.
Source: NIST
CVE-2015-9407 (xpinner_lite)