Design/Logic Flaw

The Post Connector plugin before 1.0.4 for WordPress has XSS via addqueryarg and removequeryarg...