WordPress WP Forms 1.6.3.1 Cross SIte Scripting

WordPress WP Forms plugin version 1.6.3.1 suffers from a persistent cross site scripting vulnerability.