WordPress Newsletter Supsystic plugin version 1.1.7 suffers from a cross site scripting vulnerability.