Input validation vulnerability in Mingle Forum 1.0.33

The Mingle Forum plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This means that, in versions up to and including 1.0.33, attackers could use it to inject malicious web scripts into a victim’s browser. These scripts could then execute and cause harm. Unfortunately, the plugin did not correctly sanitize user input nor escape output, leaving it vulnerable to this type of attack.