Input validation vulnerability in Cyberus Key 1.0

The Cyberus Key plugin for WordPress is vulnerable to a type of attack known as Stored Cross-Site Scripting. This type of attack can be used to inject malicious code into a web page, which can then be executed whenever the page is visited. This can be done if a user with administrator-level permissions and above has not properly secured their WordPress website. This vulnerability only affects WordPress websites that are multi-site installations, or ones where unfiltered_html has been disabled. The Cyberus Key plugin is vulnerable to this attack in all versions up to, and including, version 1.0.