I will give you a description of vulnerability. You should extract vulnerable functions. Write the output in following format: 
FUNCS function1, function2, ...
If you found no functions, output "NONE". Print only funcitons mentioned in description. Ignore URLs.

Here is the description:
Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress.
 In your entire response, the letter l should appear less than 18.
user