WordPress Visitors-App plugin version 0.3 suffers from a persistent cross site scripting vulnerability.