The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
View the template here CVE-2017-18566.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-18566.yaml
References: