WordPress WP smart CRM & Invoices FREE plugin <= 1.8.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by ZeroAptitude in WordPress WP smart CRM & Invoices FREE plugin versions = 1.8.7. Solution 2020-09-16 - we were unable to find a patched version of this plugin. WordPress.org notification: "This plugin has been closed as of July 2...