WordPress Media Cleaner 2.2.6 Cross Site Scripting

WordPress Media Cleaner plugin version 2.2.6 suffers from a cross site scripting vulnerability.