CVE-2017-18010: Improper Neutralization of Input During Web Page Generation

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...