Excellent plugin, question on cross-site scripting

Hello @littlefisherman

Thank you for being so concerned.

The issue is already fixed in 3.2.47, and the notice is a false positive.

Also, even if the issue exists, it is only exploitable by the admin himself or the users; the admin is authorized to create posts. So, if your website doesn’t have an untrustworthy author, you have nothing to worry about for such an issue.

However, we have already fixed this issue, and you are safe using the plugin.

With Regards

Hi @littlefisherman

You are welcome.

Also, we will make it more secure with the upcoming updates.

Regards