WordPress Change Login Logo plugin version 1.0.1 suffers from a persistent cross site scripting vulnerability.