Query Monitor 3.20.2 active in production (reflected XSS + info disclosure)

A developer debugging plugin is left active in production, leaking internal info and enabling reflected cross-site scripting.

Query Monitor (plugin version)