WordPress NextGen Gallery Sell Photo plugin version 1.0.5 suffers from a persistent cross site scripting vulnerability.