WordPress Sender 0.7 Cross Site Scripting

WordPress Sender plugin version 0.7 suffers from a cross site scripting vulnerability.