WordPress WP Posts Carousel plugin <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_play_timeout Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via autoplaytimeout Parameter vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Posts Carousel versions = 1.3.7...