WordPress Advanced Post Type Ratings plugin version 1.1 suffers from a cross site scripting vulnerability.