Log Viewer XSS ?

Hi.
404 Log viewer seems to be vulnerable with following url :
“http://www.example.com/example.any?name=lkjdfa&oij=iqx6mA%3D%3D&sections=All<script>alert(12345)</script>z&#8221;
you can see an alert with “12345” in it when accessing Log page in itheme security, it’s not working if run this url in browser and it should run in curl and then go to log page.

https://ww.wp.xz.cn/plugins/better-wp-security/