The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24699
Reference (s):
- https://l0l.xyz/sec/2020/08/31/1-wordpress-crm-xss.html
- https://wordpress.org/plugins/chamber-dashboard-business-directory/#developers