WordPress KBoard plugin versions prior to 4.4 suffer from a cross site scripting vulnerability.