XSS bug found.

Hi,
I found a XSS bug in this plugin.

Step to reproduce.

1:- Go to the Plugin settings.

2:- Add the payload to the OAuth Token box.

3:-Boom we will get the XSS.

Payload:- “><img src=x onerror=prompt(‘XSS’);>

https://ww.wp.xz.cn/plugins/bitly/