Input validation vulnerability in WordPress fancybox 1.0.2

The WordPress fancybox plugin is vulnerable to a type of malicious code called Stored Cross-Site Scripting. This vulnerability exists in versions up to and including 1.0.2. Attackers can use this vulnerability to inject malicious web scripts on pages that will execute whenever a user visits an injected page. This could allow the attacker to access confidential information or cause other malicious activities.