Ad Inserter - Reflected cross-site scripting (XSS)

 1534 | $this->action = self::DST_ACTION_OPTIN_NEWSLETTER;
 1535 | $this->update (true);
 1536 | } elseif ($action == '-no') {
 1537 | $this->set_use_email (false);
 1538 | $this->action = self::DST_ACTION_OPTIN_NO_NEWSLETTER;
 1539 | $this->update (true);
 1540 | }
 1541 | }
 1542 |
 1543 | elseif (isset ($_POST [""slug""]) && isset ($_POST [""notice-check""])) {
> 1544 | echo $_POST [""notice-check""];
 1545 | }
 1546 |
 1547 | elseif (isset ($_POST [""slug""]) && isset ($_POST [""values""]) && isset ($_POST ['details'])) {
 1548 | $values = json_encode (wp_unslash ($_POST ['values']));
 1549 | $this->set_deactivation_reason ($values);
 1550 |
 1551 | $details = sanitize_text_field (wp_unslash ($_POST ['details']));
 1552 | $this->set_deactivation_details ($details);
  1553 |
  1554 |       if (isset ($_POST [""hide_form""])) {
       ^ Col 0