Input validation vulnerability in StaffList 3.1.6

The StaffList plugin for WordPress is vulnerable to a security risk called Reflected Cross-Site Scripting. This risk exists in versions 3.1.6 and below. It means that an attacker can inject malicious scripts into pages which can be executed if a user clicks on a link created by the attacker. This vulnerability occurs because the plugin does not properly sanitize and escape user input.