Input validation vulnerability in YourMembership Single Sign On – YM SSO Login 1.1.3

The YourMembership Single Sign On plugin for WordPress may have a security vulnerability that could allow an individual with administrator-level access to inject malicious web scripts into pages. If this were to happen, these scripts would execute whenever a user accessed the affected page. This security vulnerability only affects WordPress multi-site installations and installations where the feature “unfiltered_html” has been disabled. Versions of this plugin up to, and including, 1.1.3 are vulnerable to this issue due to insufficient input sanitization and output escaping.