The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
View the template here CVE-2017-18532.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18532.yaml
References: