WordPress Email Marketing and Newsletters Plugin <= 1.97 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the “FormID” or “AdministratorID” parameters.

Solution

           Update the plugin.