Input validation vulnerability in Dovetail 1.2.13

The Dovetail plugin for WordPress is vulnerable to a type of security issue known as Stored Cross-Site Scripting. This means that in versions up to and including 1.2.13, an attacker with administrator-level access or higher can inject malicious code into a page. This code will then be executed anytime a user visits that page. This vulnerability only affects WordPress installations that are a part of a multi-site network, or installations where some security features have been disabled.