WordPress Contact Form DB 2.8.13 Cross Site Scripting

WordPress Contact Form DB plugin version 2.8.13 suffers from a cross site scripting vulnerability.