WordPress BA Book Everything plugin <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin BA Book Everything versions = 1.8.27...