Auto Featured Image - Reflected cross-site scripting (XSS)

 726 | public function apt_get_thumbnail() {
 727 | if ( isset( $_POST['post_id'] ) && ! empty( $_POST['post_id'] ) ) {
 728 | $post_id = intval( $_POST['post_id'] );
 729 | if ( ! current_user_can( 'edit_post', $post_id ) ) {
 730 | wp_die( - 1 );
 731 | } else {
 732 | check_ajax_referer( 'set_post_thumbnail-' . $post_id );
 733 | $nonce = $_POST['_ajax_nonce'];
 734 | ?>
 735 | <div class='apt_thumbs' id='wapt_thumbs'>
 736 | <div class='wapt-grid-item'>
 737 | <div class=""wapt-image-box-library""
 738 | data-choose='<?php echo __( 'Choose featured image', 'apt' ); ?>'
 739 | data-update='<?php echo __( 'Select image', 'apt' ); ?>'
 740 | data-postid='<?php echo $post_id; ?>'
> 741 | data-nonce='<?php echo $nonce; ?>'
 742 | style=""background-color: #a3d2ff;"">
 743 | <div class=""wapt-item-generated""><?php echo __( 'Set featured image from medialibrary', 'apt'
 744 | </div>
 745 | </div>
 746 | </div>
  747 |     <?php
  748 |    }
  749 |   }
  750 |
  751 |   include WAPT_ABSPATH . '/admin/views/pro_column.php';
  752 |   die();
  753 |  }
      ^ Col 0