CVE-2017-1000225: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssididyoumean could allow unauthenticated attacker to do almost anything an admin can...