The webp-express plugin before 0.14.8 for WordPress has stored XSS.
CVSS 2.0
Severity: LOW
Problem Type: CWE-79,
Products Affected