Vulnerable to XSS Attack

This plugin is vulnerable to XSS attack, and is a possible attack vector for hackers. It looks like this was reported in the support a year ago, and it doesn’t appear to have been fixed. My site fell victim to this, don’t let yourself get attacked as well.