WordPress CC & BCC for Woocommerce Order Emails plugin <=1.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin CC & BCC for Woocommerce Order Emails versions = 1.4.1...