WordPress Gallagher Website Design plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Gallagher Website Design versions = 2.6.4...