Input validation vulnerability in Simple Counter 1.0.2

The Simple Counter plugin for WordPress is vulnerable to a type of cyberattack known as Stored Cross-Site Scripting in all versions up to and including 1.0.2. This type of attack can occur when an attacker, who has been given administrator-level permissions or higher, is able to inject malicious code into a page. This malicious code will be executed whenever somebody visits the page, and could be used to do things like steal information or take control of the user’s computer. This vulnerability only affects multi-site installations and installations where unfiltered_html has been disabled.