Input validation vulnerability in Favicon by RealFaviconGenerator 1.2.13

The Favicon by RealFaviconGenerator plugin for WordPress is vulnerable to a security risk called Reflected Cross-Site Scripting in versions before 1.2.13. This risk can be exploited by an unauthenticated attacker who can trick a user into performing an action, such as clicking on a link. This action can inject malicious web scripts into pages, which can be executed by the user. To protect against this risk, users should make sure they are using the most up to date version of the plugin.