The Bug Library WordPress plugin ahead of 2.one.2 doesn't sanitise and escape some of its configurations, which could allow for higher privilege customers like admin to carry out Stored Cross-website Scripting assaults https://smmpro.pk