WordPress WP Photo Album Plus 6.1.2 Cross Site Scripting

WordPress WP Photo Album Plus plugin version 6.1.2 suffers from a cross site scripting vulnerability.