Input validation vulnerability in Simple Iframe 1.1.1

The Simple Iframe plugin for WordPress is not safe to use in versions up to and including 1.1.1. This is because it does not properly protect user input from malicious code. Attackers who have contributor-level permissions and above can inject a malicious script into a page. This script will run whenever someone views the page, allowing the attacker to gain access to the website.