Input validation vulnerability in GamiPress – Youtube integration 1.0.7

The GamiPress – Youtube integration plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This means that if you have the plugin installed in versions up to and including 1.0.7, an attacker who is logged in with contributor-level or higher permissions can insert malicious code in pages on your website. This code will be executed every time someone accesses the page, which could lead to a range of malicious activities.