WordPress Canvas - Shortcodes plugin version 1.92 suffers from a persistent cross site scripting vulnerability.