CVE-2022-1268: Improper Neutralization of Input During Web Page Generation

The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting...