WordPress Nextend Twitter Connect 1.5.1 Cross Site Scripting

WordPress Nextend Twitter Connect plugin version 1.5.1 suffers from a cross site scripting vulnerability.