Stored Cross-Site Scripting (XSS) found by Sybre Waaijer in WordPress Donorbox plugin (versions 7.1-7.1.1).
Update the WordPress Donorbox plugin to the latest available version (at least 7.1.2).
wordpress.org/plugins/donorbox-donation-form/#developers