WordPress Twitter 2.37 Cross Site Scripting

WordPress Twitter plugin version 2.37 suffers from a cross site scripting vulnerability.