Bug: author Prep will show html a tag out

It seems the developer missed to quote the href property of author link.
The line 744 of inc/import_posts.php below

$authorPrep="By ";

		if(!empty($items["myAuthor"]) && $addAuthor==1){
		 	$thisContent .=  '<span style="font-style:italic; font-size:16px;">'.$authorPrep.' <a '.$openWindow.' href='.$items["mylink"].' '.($noFollow==1 ? 'rel=nofollow':'').'">'.$items["myAuthor"].'</a></span>  ';
			}

Should be updated as:

$authorPrep="By ";

		if(!empty($items["myAuthor"]) && $addAuthor==1){
		 	$thisContent .=  '<span style="font-style:italic; font-size:16px;">'.$authorPrep.' <a '.$openWindow.' href="'.$items["mylink"].'"" '.($noFollow==1 ? 'rel=nofollow':'').'">'.$items["myAuthor"].'</a></span>  ';
			}

https://wordpress.org/plugins/wp-rss-multi-importer/