Input validation vulnerability in Waiting: One-click countdowns 0.6.2

The Waiting: One-click countdowns plugin for WordPress has a security issue that could allow a malicious user with administrator-level permission to inject code into web pages that they view. This code could then be executed when a regular user visits the same page, without the malicious user’s intervention. This vulnerability affects versions up to and including 0.6.2 and is caused by a lack of proper input checking and output escaping.