Input validation vulnerability in Custom Banners 3.2.2

The Custom Banners plugin for WordPress is vulnerable to a type of security attack known as Cross-Site Request Forgery. Versions up to 3.2.2 are affected. This is because there is either no validation or incorrect validation of a security code known as a nonce on the saveCustomFields() function. This means it might be possible for someone without permission to save custom fields on a WordPress site if they can get an administrator to click on a link.