Input validation vulnerability in Custom Admin Login Page | WPZest 1.2.0

The Custom Admin Login Page | WPZest plugin for WordPress is vulnerable to a type of security breach called Stored Cross-Site Scripting in versions up to and including 1.2.0. This type of breach happens when a website does not properly sanitize and escape user input. An authenticated attacker, who has administrator-level access or higher, can inject malicious web scripts onto pages that will execute whenever someone visits them. This type of security breach only affects multi-site installations and installations where a feature called ‘unfiltered_html’ has been disabled.