The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter.
CVE Status: Modified
No CVSS data available
Exploit-db Github