Input validation vulnerability in wp-Monalisa 6.1

The wp-Monalisa plugin is vulnerable to a kind of malicious attack called Stored Cross-Site Scripting. This means that if you are using versions of the plugin up to and including 6.1, then attackers who have administrator-level permissions or higher can inject malicious web scripts into pages, which can then be executed whenever a user visits the page. This is due to a lack of proper input validation and output escaping.