CVE-2020-13892

The SportsPress plugin before 2.7.2 for WordPress allows XSS.