WordPress UserPro 2.33 Cross Site Scripting

WordPress UserPro plugin version 2.33 suffers from a cross site scripting vulnerability.