Input validation vulnerability in smart-slider-2 2.3.12

The Smart Slider 2 plugin for WordPress is vulnerable to a type of malicious attack. This attack, called Reflected Cross-Site Scripting, can be carried out if the user clicks on a link that has been created by an attacker. This vulnerability affects versions up to and including 2.3.11 due to the lack of input sanitization and output escaping that the plugin has. If the attack is successful, the attacker can inject scripts into the page that can be executed.