The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site Scripting issues
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00914·Published 2021-11-01·Fixed in 6.9CWE-79