Design/Logic Flaw

The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name...