Input validation vulnerability in Email Users 4.7.6

The email-users plugin for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting in versions up to and including 4.7.5. This attack is due to a lack of security measures that would check the data that is put into the plugin and protect it from malicious content. If someone with malicious intent can convince a user to click on something, they can inject web scripts into a page that will run when the user accesses it. This could be used to steal information or disrupt the website.