WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin BookingPress versions = 1.1.25...