WordPress MD Custom content after or before of post plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin MD Custom content after or before of post versions = 1.0...