A cross-site scripting vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter.
View the template here CVE-2011-5265.yaml
References:
https://exchange.xforce.ibmcloud.com/vulnerabilities/71468