Input validation vulnerability in Rencontre – Dating Site 3.2.2

The Rencontre – Dating Site plugin for WordPress is vulnerable to a type of security threat called Stored Cross-Site Scripting. This vulnerability affects versions of the plugin up to 3.2.1, and happens when the ‘facebook’ parameter is not secured properly. If this vulnerability is exploited, an attacker with subscriber-level permission or higher can inject malicious web scripts into pages that will be activated when a user visits the page. This is only a risk on multi-site installations and on sites where the ‘unfiltered_html’ feature has been disabled.