WordPress kvCORE IDX plugin <= 2.3.35 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin kvCORE IDX versions = 2.3.35...