Input validation vulnerability in Bulk change of posts terms and post types 1.0

The Bulk change of posts terms and post types plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This security issue allows someone who is not logged in to add malicious code to a WordPress page. This code can then be run whenever someone views the page, potentially giving the attacker access to the website. The security issue affects versions 1.0 and earlier of the plugin and is caused by the plugin not properly sanitizing and escaping user input.