Input validation vulnerability in Nested Pages 3.2.6

The Nested Pages plugin for WordPress is vulnerable to a security issue called Stored Cross-Site Scripting. This is a problem that can be exploited by people with administrator-level permissions. It allows them to inject malicious code (also known as web scripts) into pages on the website. If a user visits one of these pages, the malicious code will be executed. This issue only affects websites that have multi-site installation or have disabled the unfiltered_html setting. All versions of the plugin up to and including 3.2.6 are vulnerable.