WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting

WordPress Flickr Justified Gallery plugin version 3.3.6 suffers from a cross site scripting vulnerability.