Cross site scripting

The share-on-diaspora plugin before 0.7.2 for WordPress has reflected XSS in share URL parameters...