Product
The AMP for WP - Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' shortcode attributes due to insufficient input sanitization and output escaping.