Input validation vulnerability in PressForward 5.2.8

The plugin PressForward for WordPress is potentially vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack is when someone can inject malicious code into a webpage and have it execute when someone else views the page. The plugin is vulnerable in versions up to and including 5.2.8 because it does not properly filter the data input or properly escape the output.