Input validation vulnerability in Content Staging 2.0.1

The Content Staging WordPress plugin has a security issue that could let attackers take control of websites. This problem affects any website that uses the plugin and has either disabled unfiltered_html for administrators or disabled it completely. Versions of the plugin up to and including 2.0.1 are vulnerable because of the way it handles input validation and escaping. Attackers who have access to the website as an administrator can inject malicious web scripts into the system via the ~/templates/settings.php file.