WordPress GetYourGuide Ticketing plugin version 1.0.6 suffers from a cross site scripting vulnerability.