WordPress Activity Log plugin version 2.3.2 suffers from a cross site scripting vulnerability in the search function.