Magic Tooltips for Contact Form 7 (<= 1.0.34)

An unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Magic Tooltips For Contact Form 7 plugin up to version 1.0.34 allows attackers to inject malicious scripts via the author parameter.