WordPress My Page Order Plugin <= 4.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameters are "pages" and "hdnParentID". Solution Upgrade this plugin...