WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Call me Now versions = 1.0.5...