CVE-2016-11001

The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.

Date published : 2019-09-20

User Submitted Posts – Enable Users to Submit Posts from the Front End

https://www.securityfocus.com/archive/1/537616/30/0/threaded