CVE-2017-1002017: Improper Neutralization of Input During Web Page Generation

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability...