CVE-2017-15384

rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action...