Input validation vulnerability in LDD Directory Lite 3.5

The LDD Directory Lite plugin for WordPress is vulnerable to an attack called Reflected Cross-Site Scripting. This type of attack happens when a malicious user can inject web scripts into pages on a website, and if they can find a way to get a user to click on a link, the script will execute. Versions of the plugin up to and including 3.5 are vulnerable to this attack because they do not properly escape the URL when echoing $_SERVER[‘REQUEST_URI’].