Input validation vulnerability in Pagination by BestWebSoft – Customizable WordPress Content Splitter and Navigation Plugin 1.2.2

The Pagination by BestWebSoft plugin for WordPress is vulnerable to a security issue known as Stored Cross-Site Scripting. This is an issue where malicious scripts can be added to pages which will be executed when a user accesses the page. This only affects certain WordPress installations; those which are multi-site or have disabled a particular feature known as unfiltered_html. The vulnerability is present in all versions up to and including 1.2.2, due to the plugin not properly sanitizing input or properly escaping output. To protect against this, ensure the plugin is updated to the latest version.