The plugin was affected by a Cross-Site Scripting (XSS) vulnerability.