WordPress Stripe Payments plugin version 2.0.39 suffers from a persistent cross site scripting vulnerability.