CVE-2015-9420: Improper Neutralization of Input During Web Page Generation

The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=getsoundcloudplayer id parameter...