Input validation vulnerability in WP Edit Username 1.0.5

The WP Edit Username plugin for WordPress has a security vulnerability which can be exploited by attackers with administrator-level permissions. If exploited, it allows them to inject web scripts into pages which will execute whenever a user visits the page. This vulnerability only affects multi-site installations and installations where a specific security feature has been disabled. The vulnerability exists in all versions up to and including 1.0.5 due to the lack of proper input sanitization and output escaping.