WordPress Chief Editor 3.6.1 Cross Site Scripting

WordPress Chief Editor plugin version 3.6.1 suffers from a cross site scripting vulnerability.