WordPress MaxButtons 1.26.0 Cross Site Scripting

WordPress MaxButtons plugin version 1.26.0 suffers from a cross site scripting vulnerability.