Security: markdownPreview.php is a security hole

markdownPreview.php contains a security hole that allows XSS

If an attacker can trick an admin into visiting a malicious website (via a comment link or something), he can steal the admins cookies or perform actions on the admin’s behalf, such as creating a new user.

http://ww.wp.xz.cn/extend/plugins/magic-fields/