WordPress WP Advanced Importer plugin version 2.1.1 suffers from a cross site scripting vulnerability.