Input validation vulnerability in Social Slider Feed 2.0.5

The Social Slider Feed plugin for WordPress is vulnerable to an attack called Stored Cross-Site Scripting. This attack is possible in versions of the plugin up to and including 2.0.5 due to an issue with how it handles user input and output. If the attacker has administrator-level permissions they can inject malicious web scripts into pages that will be executed every time a user visits the page.