Input validation vulnerability in ANAC XML Viewer 1.7

The ANAC XML Viewer plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can be used by an authenticated attacker, with administrator-level permissions or above, to inject malicious web scripts into pages. The malicious scripts will then be executed whenever a user accesses an infected page. This vulnerability affects all versions of the plugin up to and including version 1.7. It only affects multi-site installations and installations where a security feature called unfiltered_html has been disabled.