WordPress Citizen Space 1.1 Cross Site Scripting

WordPress Citizen Space plugin version 1.1 suffers from a cross site scripting vulnerability.