Input validation vulnerability in About Me 3000 widget 2.2.6

The About Me 3000 widget plugin for WordPress is vulnerable to a form of attack called Stored Cross-Site Scripting. This type of attack can allow someone with administrative-level permissions to inject malicious code into a website. If a user visits a page where this malicious code has been injected, the code can be run on their device. This vulnerability only affects WordPress websites that are set up as multi-sites and websites where the “unfiltered_html” function has been disabled. Versions of the About Me 3000 widget plugin up to and including 2.2.6 are vulnerable.