Input validation vulnerability in Don8 0.4

The Don8 plugin for WordPress, up to version 0.4, is vulnerable to a type of attack called Stored Cross-Site Scripting. This vulnerability only affects multi-site installations and installations where a certain security setting has been disabled. If the vulnerability is exploited, an attacker with administrator-level access or higher can inject web scripts into pages. These scripts will run each time a user visits one of the injected pages.