WordPress Clicface Trombi plugin <= 2.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via nom Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via nom Parameter vulnerability discovered by SOPROBRO in WordPress Plugin Clicface Trombi versions = 2.08...